CVE-2013-4480

HIGH 7.5CVE-2013-4480 · Published 18/11/2013 · updated 16/06/2026

In short

CVE-2013-4480 is a HIGH (CVSS 7.5) vulnerability affecting network satellite (redhat), satellite (redhat), satellite with embedded oracle (redhat).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
network satellite redhat	`≤ 5.6`	No fix yet
satellite redhat	`≤ 5.6`	No fix yet
satellite with embedded oracle redhat	`= 5.2= 5.3= 5.4= 5.5`	No fix yet
manager suse	`= 1.7`	No fix yet

Description

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.

References

lists.opensuse.org/opensuse-security-announce/2013-11/msg00009.html · Mailing List
rhn.redhat.com/errata/RHSA-2013-1513.html · Vendor Advisory
rhn.redhat.com/errata/RHSA-2013-1514.html · Vendor Advisory
access.redhat.com/site/articles/539283 · Vendor Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking

More vulnerabilities in network satellite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free