A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.
Weakness
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Satellite | Redhat | * | 5.6 (excluding) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/102.html
- https://cwe.mitre.org/data/definitions/117.html
- https://cwe.mitre.org/data/definitions/383.html
- https://cwe.mitre.org/data/definitions/477.html
- https://cwe.mitre.org/data/definitions/65.html
References
- https://access.redhat.com/security/cve/CVE-2012-5562
- https://access.redhat.com/security/cve/cve-2012-5562
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562
- https://access.redhat.com/security/cve/cve-2012-5562
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562