Description
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Network Satellite Server v 5.3 | — | — |
| Red Hat | Red Hat Network Satellite Server v 5.4 | — | — |
| Red Hat | Red Hat Network Satellite Server v 5.5 | — | — |
| Red Hat | Red Hat Satellite 6 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | spacewalk-backend +15 | 0.5.28-59.3.el5sat | RHSA-2013:0848 |
| Red Hat Network Satellite 5 | spacewalk-backend-libs +1 | 1.2.13-79.el5sat | RHSA-2013:0848 |
Advisories 1
- RHSA-2013:0848 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update Red Hat Security Advisories (RHSA) · Nov 22, 2025