Dashboard / CVE-2013-2056

CVE-2013-2056

HIGH
MEDIUM Priority: 0.18 BB Relevance: 75/100
Published: 2013-07-31 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.

Weakness Classification (2)

Affected Software (3)

VendorProductVersion
redhat satellite 5.3
redhat satellite 5.4
redhat satellite 5.5

References & Advisories (5)

https://access.redhat.com/errata/RHSA-2013:0848
vendor-advisory x_refsource_REDHAT

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

2.37%
Raw Score 0.023670
Percentile 83.8%
Date 2026-10-30

Intelligence Sources

mitre ref →
nvd ref →

External Links