Y2
Public vulnerability disclosure

CVE-2013-2056

Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass

publishedCWE-306

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.

Investigate in Cyber JSONMarkdown
Technical severity7.5 highCVSS 3.1 · CNA: redhat
Published2013-07-31Source updated 2026-11-02
Collected2026-11-022 attributed sources

Fixes and workarounds

Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Source: CNA: redhat

Affected products and versions

ProductVersionsAuthority
Red Hat Network Satellite Server v 5.3
Red Hat
spacewalk-backend
https://access.redhat.com/downloads/content/package-browser/ 		≥ 0:0.5.28-59.3.el5sat; < * (unaffected, rpm)
Other versions: affected 		CNA: redhat
Red Hat Network Satellite Server v 5.4
Red Hat
spacewalk-backend
https://access.redhat.com/downloads/content/package-browser/ 		≥ 0:1.2.13-79.el5sat; < * (unaffected, rpm)
Other versions: affected 		CNA: redhat
Red Hat Network Satellite Server v 5.5
Red Hat
spacewalk-backend
https://access.redhat.com/downloads/content/package-browser/ 		≥ 0:1.7.38-45.el5sat; < * (unaffected, rpm)
Other versions: affected 		CNA: redhat
Red Hat Satellite 6
Red Hat
satellite
https://access.redhat.com/downloads/content/package-browser/ 		Range not reported
Other versions: unaffected 		CNA: redhat

Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.

CVSS assessments

Version / scoreVectorAuthority
3.1 / 7.5
high		 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCNA: redhat

Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

References