CVE-2008-2369

Опубликовано: 14 авг. 2008

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive information about user accounts and entitlements.

Ссылки

http://rhn.redhat.com/errata/RHSA-2008-0630.html
Vendor Advisory
http://secunia.com/advisories/31493
Broken Link
http://securitytracker.com/id?1020694
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/30679
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44452
Third Party Advisory
VDB Entry
http://rhn.redhat.com/errata/RHSA-2008-0630.html
Vendor Advisory
http://secunia.com/advisories/31493
Broken Link
http://securitytracker.com/id?1020694
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/30679
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44452
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*

Версия до 5.1.1 (исключая)

EPSS

Процентиль: 69%

0.00616

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-798

Связанные уязвимости