CVE-2012-6137
21.05.2013, 18:55
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | enterprise_linux_desktop | 5.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_eus | 5.9.z:z |
| redhat | enterprise_linux_long_life | 5.9 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server_aus | 6.4 |
| redhat | enterprise_linux_server_eus | 6.4.z:z |
| redhat | enterprise_linux_workstation | 6.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References