{"identifier":"CVE-2013-2056","cve":{"id":"CVE-2013-2056","description":"A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.","published":"2013-07-31T13:20:24.697000+00:00","modified":"2026-10-30T17:17:07.210000+00:00","status":"Modified","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_version":"3.1","affected":[{"criteria":"cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*","versionStartIncluding":"","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":""},{"criteria":"cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*","versionStartIncluding":"","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":""},{"criteria":"cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*","versionStartIncluding":"","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":""}],"weaknesses":["CWE-287","CWE-306"],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0848.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/53487","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/93566","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2013:0848","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2013-2056","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0848.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/53487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/93566","source":"af854a3a-2127-422b-91ae-364da2661108"}],"kev":null,"kev_checked":true,"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D1FDDB68-9828-4DAF-8417-4E3B68ABA2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*","matchCriteriaId":"3CCE54F9-0195-4E9D-A15F-3947EA0EBED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9B6D3920-6A7D-4AF8-A620-80C89FF454F2"}]}]}],"source":"nvd","retrieved_at":"2026-10-30T19:24:21.857457+00:00","exploited":false,"kev_stale":false,"products":["redhat / satellite"],"priority":{"label":"Assess exposure and vendor guidance","reasons":["No higher-priority signal is available in the current stored evidence.","Fresh EPSS data is unavailable; missing values are not zero."]},"epss":null,"version_assessment":null},"news":[],"campaigns":[],"domains":[{"domain":"rhn.redhat.com","source_url":"http://rhn.redhat.com/errata/RHSA-2013-0848.html","investigate_url":"https://investigate.aeglixmind.com/#rhn.redhat.com"},{"domain":"secunia.com","source_url":"http://secunia.com/advisories/53487","investigate_url":"https://investigate.aeglixmind.com/#secunia.com"},{"domain":"www.osvdb.org","source_url":"http://www.osvdb.org/93566","investigate_url":"https://investigate.aeglixmind.com/#www.osvdb.org"},{"domain":"access.redhat.com","source_url":"https://access.redhat.com/errata/RHSA-2013:0848","investigate_url":"https://investigate.aeglixmind.com/#access.redhat.com"}],"arsenal_url":"https://arsenal.aeglixmind.com/?cve=CVE-2013-2056","catalog_url":"https://cves.aeglixmind.com/cve/CVE-2013-2056","research_url":"https://investigate.aeglixmind.com/research/cve/CVE-2013-2056","coverage":{"news_candidates_checked":0,"campaign_candidates_checked":0,"bounded":false,"notice":"Exact CVE mentions in stored public excerpts and reviewed campaign content only. A mention is not proof of exploitation, attribution or tool suitability. Missing matches do not establish absence."}}