CVE-2012-5562

Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite

Published Dec 2, 2019 CVSS 3.1 · 8.6 High EPSS 1.0% KEV · Not listed
Description
A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-5454 rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:network_proxy:5.6::el6
References
Type Values Removed Values Added
Description rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.
Title rhn-proxy: may transmit credentials over clear-text Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite
CPEs cpe:/a:redhat:satellite:6
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV3_1

{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Oct 30, 2026, 4:38 PM
Reserved
Oct 24, 2012, 12:00 AM
Status
Modified
Published
Dec 2, 2019, 7:15 PM
Modified
Oct 30, 2026, 5:17 PM
Severity
Moderate
Public date
Feb 10, 2014, 12:00 AM