# CVE-2013-2056: Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass

Status: published. Published: 2013-07-31. Updated: 2026-11-02.

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.

## Remediation

- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. (source: CNA: redhat)

## Affected products and versions

- Red Hat / Red Hat Network Satellite Server v 5.3 (spacewalk-backend): ≥ 0:0.5.28-59.3.el5sat; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 5.4 (spacewalk-backend): ≥ 0:1.2.13-79.el5sat; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 5.5 (spacewalk-backend): ≥ 0:1.7.38-45.el5sat; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Satellite 6 (satellite): Version range not reported. Source: CNA: redhat

## Severity and prioritization

- CVSS 3.1: 7.5 (high); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; source: CNA: redhat

- CISA KEV: No listing in collected sources

- EPSS: 2.62% as of 2026-11-01; percentile 85.44%

- SSVC: Not available

- Weaknesses: CWE-306

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- http://rhn.redhat.com/errata/RHSA-2013-0848.html (CNA: redhat)

- http://secunia.com/advisories/53487 (CNA: redhat)

- http://www.osvdb.org/93566 (CNA: redhat)

- https://access.redhat.com/errata/RHSA-2013:0848 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/security/cve/CVE-2013-2056 (CNA: redhat; vdb-entry, x_refsource_REDHAT)

- http://rhn.redhat.com/errata/RHSA-2013-0848.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://www.osvdb.org/93566 (ADP: CVE; vdb-entry, x_refsource_OSVDB, x_transferred)

- http://secunia.com/advisories/53487 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

## Provenance

- CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2013-2056; retrieved 2026-11-02; source updated 2026-11-02

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2013-2056; retrieved 2026-11-02; source updated Not reported

Revision: b83054a4b827653937cac71fc68a13b8f3583d949a7771e2677b48bcd1f0e28c

Canonical: https://y2.dev/cve/CVE-2013-2056