{"id":"CVE-2012-5562","aliases":["EUVD-2012-5454","GHSA-782c-hpc8-pfgv","RHEA-2013:1392"],"status":"published","title":"Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite","description":"A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01019,"percentile":0.63604,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2019-12-02T18:12:41Z","modified":"2026-10-30T18:33:18Z","products":[{"vendor":"red hat","product":"red hat satellite 6"},{"vendor":"red hat","product":"red hat satellite proxy v 5.6"},{"vendor":"redhat","product":"satellite"}],"references":[{"url":"https://access.redhat.com/errata/RHEA-2013:1392","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5562","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","report"]},{"url":"https://access.redhat.com/security/cve/cve-2012-5562","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5562","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-782c-hpc8-pfgv"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=924174","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhea-2013_1392.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=879369","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5562","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-5562","title":"Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite","description":"A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.","status":"published","published":"2019-12-02T18:12:41Z","modified":"2026-10-30T16:38:15.122Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:34:49.246229Z"}],"euvd":[{"id":"EUVD-2012-5454","description":"A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.","status":"published","published":"2019-12-02T18:12:41Z","modified":"2026-10-30T16:38:15Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:59:05.567782Z"}],"ghsa":[{"id":"GHSA-782c-hpc8-pfgv","title":"rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite","description":"rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite","status":"published","published":"2022-04-23T00:40:22Z","modified":"2026-10-30T18:33:18Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T15:14:52.01816Z"}],"nvd":[{"id":"CVE-2012-5562","description":"A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.","status":"published","published":"2019-12-02T19:15:11.027Z","modified":"2026-10-30T17:17:06.707Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:02:18.043773Z"}],"osv":[{"id":"RHEA-2013:1392","title":"Red Hat Enhancement Advisory: Red Hat Satellite Proxy 5.6.0 General Availability","status":"withdrawn","published":"2024-09-15T21:05:35Z","modified":"2026-01-29T11:01:55.068096Z","updated_at":"2026-11-02T15:52:58.636919Z"}]}}