CVE-2012-6137
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat...
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.
Exploit likelihood
What each source reports
NVD Score used
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.
- Record
CVE-2012-6137- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.
- Record
CVE-2012-6137- Updated
- 2026-11-02
EUVDEUVD-2012-5998 No score
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.
- Record
EUVD-2012-5998- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qw78-gpjg-cm27 No score
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat...
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.
- Record
GHSA-qw78-gpjg-cm27- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
subscription-managerRed Hat:enterprise_linux:5::server |
before 0:1.0.24.1-1.el5_9 | 0:1.0.24.1-1.el5_9 |
subscription-manager-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.0.24.1-1.el5_9 | 0:1.0.24.1-1.el5_9 |
subscription-manager-firstbootRed Hat:enterprise_linux:5::server |
before 0:1.0.24.1-1.el5_9 | 0:1.0.24.1-1.el5_9 |
subscription-manager-guiRed Hat:enterprise_linux:5::server |
before 0:1.0.24.1-1.el5_9 | 0:1.0.24.1-1.el5_9 |
subscription-manager-migrationRed Hat:enterprise_linux:5::server |
before 0:1.0.24.1-1.el5_9 | 0:1.0.24.1-1.el5_9 |
subscription-managerRed Hat:enterprise_linux:6::client |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-firstbootRed Hat:enterprise_linux:6::client |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-guiRed Hat:enterprise_linux:6::client |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-migrationRed Hat:enterprise_linux:6::client |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
subscription-managerRed Hat:enterprise_linux:6::computenode |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-migrationRed Hat:enterprise_linux:6::computenode |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-firstbootRed Hat:enterprise_linux:6::computenode |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-guiRed Hat:enterprise_linux:6::computenode |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-managerRed Hat:enterprise_linux:6::server |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-firstbootRed Hat:enterprise_linux:6::server |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-guiRed Hat:enterprise_linux:6::server |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-migrationRed Hat:enterprise_linux:6::server |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-managerRed Hat:enterprise_linux:6::workstation |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-firstbootRed Hat:enterprise_linux:6::workstation |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-guiRed Hat:enterprise_linux:6::workstation |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
subscription-manager-migrationRed Hat:enterprise_linux:6::workstation |
before 0:1.1.23.1-1.el6_4 | 0:1.1.23.1-1.el6_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6137 is a medium vulnerability (CVSS 4.3) in Redhat Enterprise Linux, published May 21, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. Fixed in subscription-manager 0:1.0.24.1-1.el5_9.
References
securityfocus.com/bid/59674
osvdb.org/93058
securitytracker.com/id/1028520
secunia.com/advisories/53330
exchange.xforce.ibmcloud.com/vulnerabilities/84020
bugzilla.redhat.com/show_bug.cgi?id=885130
Show 8 moreShow less
rhn.redhat.com/errata/RHSA-2013-0788.html
nvd.nist.gov/vuln/detail/CVE-2012-6137
github.com/advisories/GHSA-qw78-gpjg-cm27
access.redhat.com/errata/RHSA-2013:0788
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0788.json
cve.org/CVERecord?id=CVE-2012-6137