VULNERABILITY INTELLIGENCE

CVE-2013-2056

CVSS score5 MEDIUM
EPSS probability2.37%
CISA KEVNot currently listed
Published2013-07-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call.

Weakness classification

  • CWE-287: Improper Authentication

Primary references