---
id: CVE-2013-2056
title: >-
  Red hat network satellite: red hat network satellite: information disclosure
  via inter-satellite sync (iss) authentication bypass
summary: >-
  A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS)
  operation, which synchronizes data between satellites, does not properly
  verify the authenticity of clients. This allows remote attackers to bypass the
  initial…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-306
vendor: Red Hat
product: spacewalk-backend
affected:
  - spacewalk-backend (all versions)
  - spacewalk-backend (all versions)
  - spacewalk-backend (all versions)
  - satellite
published: '2013-07-31'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T00:59:12.284Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2013-2056'
references:
  - url: 'http://rhn.redhat.com/errata/RHSA-2013-0848.html'
  - url: 'http://secunia.com/advisories/53487'
  - url: 'http://www.osvdb.org/93566'
  - url: 'https://access.redhat.com/errata/RHSA-2013:0848'
    label: 'RHSA-2013:0848'
  - url: 'https://access.redhat.com/security/cve/CVE-2013-2056'
tags:
  - cve.org
epss: 0.02616
epssPercentile: 0.85485
ingestedAt: '2026-11-05T19:30:42.616Z'
---

## Overview

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.

## Affected

- `spacewalk-backend (all versions)`
- `spacewalk-backend (all versions)`
- `spacewalk-backend (all versions)`
- `satellite`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.