VDB
CVE-2013-4480
CVE-2013-4480
PUBLISHED
CVSS 7.5 HIGH
Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.
EPSS 2.08% · 81.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
2.08%
81.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| redhat | network_satellite | 0 |
| n/a | n/a | n/a |
| redhat | satellite_with_embedded_oracle | 5.2, 5.4, 5.5 |
| suse | linux_enterprise | 11.0 |
| redhat | satellite | 0 |
| suse | manager | 1.7 |
Timeline
- Nov 15, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
References
- RHSA-2013:1513 vendor-advisory
- RHSA-2013:1514 vendor-advisory
- SUSE-SU-2013:1661 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1024614 url
- https://access.redhat.com/site/articles/539283 url
- https://nvd.nist.gov/vuln/detail/CVE-2013-4480 advisory
- https://access.redhat.com/errata/RHSA-2013:1513 url
- https://access.redhat.com/errata/RHSA-2013:1514 url
- https://access.redhat.com/security/cve/CVE-2013-4480 url