CVE-2013-2056
Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
7.5 HighFix available
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
2.62%Up 1.5 points since Feb 4, 2022
What each source reports
CVE List Score used
Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
- Record
CVE-2013-2056- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2013-2038
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
- Record
EUVD-2013-2038- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p9rr-x8fh-7586
The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5...
The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call.
- Record
GHSA-p9rr-x8fh-7586- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-287, CWE-306
- Updated
- 2026-11-02
NVD
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
- Record
CVE-2013-2056- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-306, CWE-287
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
spacewalk-backendRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-appRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-appletRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-config-filesRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-config-files-commonRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-config-files-toolRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-issRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-iss-exportRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-package-push-serverRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-serverRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
Show 76 moreShow less
| Package | Affected | Fixed |
|---|---|---|
spacewalk-backend-sqlRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-toolsRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-upload-serverRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-xml-export-libsRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-xmlrpcRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backend-xpRed Hat:network_satellite:5.3::el5 |
before 0:0.5.28-59.3.el5sat | 0:0.5.28-59.3.el5sat |
spacewalk-backendRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-appRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-appletRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-config-filesRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-config-files-commonRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-config-files-toolRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-issRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-iss-exportRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-libsRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-package-push-serverRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-serverRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-sqlRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-sql-oracleRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-toolsRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-upload-serverRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-xml-export-libsRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-xmlrpcRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backend-xpRed Hat:network_satellite:5.4::el5 |
before 0:1.2.13-79.el5sat | 0:1.2.13-79.el5sat |
spacewalk-backendRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-appRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-appletRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-config-filesRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-config-files-commonRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-config-files-toolRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-issRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-iss-exportRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-libsRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-package-push-serverRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-serverRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-sqlRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-sql-oracleRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-toolsRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-xml-export-libsRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-xmlrpcRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backend-xpRed Hat:network_satellite:5.5::el5 |
before 0:1.7.38-45.el5sat | 0:1.7.38-45.el5sat |
spacewalk-backendRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-appRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-appletRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-config-filesRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-config-files-commonRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-config-files-toolRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-issRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-iss-exportRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-libsRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-package-push-serverRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-serverRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-sqlRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-sql-oracleRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-toolsRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-xml-export-libsRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-xmlrpcRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backend-xpRed Hat:network_satellite:5.5::el6 |
before 0:1.7.38-45.el6sat | 0:1.7.38-45.el6sat |
spacewalk-backendRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-appRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-appletRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-config-filesRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-config-files-commonRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-config-files-toolRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-issRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-iss-exportRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-libsRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-package-push-serverRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-serverRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-sqlRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-sql-oracleRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-toolsRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-upload-serverRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-xml-export-libsRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-xmlrpcRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
spacewalk-backend-xpRed Hat:network_satellite:5.4::el6 |
before 0:1.2.13-79.el6sat | 0:1.2.13-79.el6sat |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2056 is a high vulnerability (CVSS 7.5) in Redhat Satellite, published July 31, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. Fixed in spacewalk-backend 0:0.5.28-59.3.el5sat.