CVE-2012-5562: Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite

Modified

AliasesRHEA-2013:1392

Published 02-12-2019Last modified 30-10-2026

Vulnerability summary

CVE-2012-5562 is a high (CVSS 8.6) vulnerability in redhat satellite. EPSS estimates a 1.02% chance of exploitation in the next 30 days, higher than 63.4% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 8.6 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

8.6/10

010

High · v3.1 (CVE.org)

EPSS score

1.02%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

02-12-2019
PublishedVulnerability first disclosed.
30-10-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.18.6v2.03.3

EPSS trend

Probability

1.02%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.02% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-319Cleartext Transmission of Sensitive InformationThe product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat119 products

satellite< 5.6
eventReceivers< 0:2.20.18-1.el5sat | < 0:2.20.18-1.el6sat
gc< 0:7.1-8.el5sat
gc-debuginfo< 0:7.1-8.el5sat
jabberd< 0:2.2.8-22.el5sat | < 0:2.2.8-22.el6sat

jabberd-debuginfo< 0:2.2.8-22.el5sat | < 0:2.2.8-22.el6sat
jabberd-selinux< 0:2.0.1-1.el5sat
libapreq2< 0:2.13-5.el5sat | < 0:2.13-5.el6sat
libapreq2-debuginfo< 0:2.13-5.el5sat | < 0:2.13-5.el6sat
libgsasl< 0:1.4.0-5.el5sat | < 0:1.4.0-5.el6sat
libgsasl-debuginfo< 0:1.4.0-5.el5sat | < 0:1.4.0-5.el6sat
libntlm< 0:1.0-4.el5sat | < 0:1.0-4.el6sat
libntlm-debuginfo< 0:1.0-4.el5sat | < 0:1.0-4.el6sat
MessageQueue< 0:3.26.9-1.el5sat | < 0:3.26.9-1.el6sat
mod_wsgi< 0:3.2-3.el5sat
mod_wsgi-debuginfo< 0:3.2-3.el5sat
nocpulse-common< 0:2.2.7-1.el5sat | < 0:2.2.7-1.el6sat
nocpulse-db-perl< 0:3.6.5-1.el5sat | < 0:3.6.5-1.el6sat
NOCpulsePlugins< 0:2.209.6-1.el5sat | < 0:2.209.6-1.el6sat
NPalert< 0:1.127.12-1.el5sat | < 0:1.127.12-1.el6sat
oracle-config< 0:1.1-7.el5sat | < 0:1.1-7.el6sat
oracle-instantclient< 0:10.2.0-47.el5sat | < 0:10.2.0-47.el6sat
oracle-instantclient-basic< 0:10.2.0-47.el5sat | < 0:10.2.0-47.el6sat
oracle-instantclient-selinux< 0:10.2.0.19-5.el5sat | < 0:10.2.0.19-5.el6sat
oracle-nofcontext-selinux< 0:0.1.23.35-1.el5sat | < 0:0.1.23.35-1.el6sat
oracle-selinux< 0:0.1.23.35-1.el5sat | < 0:0.1.23.35-1.el6sat
perl-BerkeleyDB< 0:0.38-6.el5sat | < 0:0.38-6.el6sat
perl-BerkeleyDB-debuginfo< 0:0.38-6.el5sat | < 0:0.38-6.el6sat
perl-Class-MethodMaker< 0:1.12-12.el5 | < 0:2.16-4.el6
perl-Class-MethodMaker-debuginfo< 0:2.16-4.el6
perl-Class-Singleton< 0:1.4-6.el5sat | < 0:1.4-6.el6
perl-Config-IniFiles< 0:2.47-5.el5sat | < 0:2.47-5.el6sat
perl-Convert-BinHex< 0:1.119-10.1.el6
perl-Crypt-DES< 0:2.05-10.el5sat | < 0:2.05-10.el6sat
perl-Crypt-DES-debuginfo< 0:2.05-10.el5sat | < 0:2.05-10.el6sat
perl-Crypt-GeneratePassword< 0:0.03-15.el5sat | < 0:0.03-15.el6sat
perl-DateTime< 0:0.27-10.el5 | < 1:0.5300-1.el6
perl-DateTime-debuginfo< 0:0.27-10.el5 | < 1:0.5300-1.el6
perl-DateTime-Locale< 0:0.09-14.el5sat
perl-DateTime-TimeZone< 0:0.59-8.el5sat
perl-DBD-Oracle< 0:1.62-2.el5sat | < 0:1.62-2.el6sat
perl-DBD-Oracle-debuginfo< 0:1.62-2.el5sat | < 0:1.62-2.el6sat
perl-Email-Date-Format< 0:1.002-5.el6
perl-Error< 0:0.15-7.el5
perl-FreezeThaw< 0:0.43-14.el5
perl-HTML-TableExtract< 0:1.08-11.el5 | < 0:2.10-8.el6sat
perl-IO-stringy< 0:2.109-11.el5 | < 0:2.110-10.1.el6
perl-libapreq2< 0:2.13-5.el5sat | < 0:2.13-5.el6sat
perl-List-MoreUtils< 0:0.22-10.el6
perl-List-MoreUtils-debuginfo< 0:0.22-10.el6
perl-MailTools< 0:1.66-6.el5
perl-MIME-Lite< 0:3.01-6.el5 | < 0:3.027-2.el6
perl-MIME-tools< 0:5.411a-12.el5 | < 0:5.427-4.el6
perl-MIME-Types< 0:1.28-2.el6
perl-Net-IPv4Addr< 0:0.10-7.el5sat | < 0:0.10-7.el6sat
perl-Net-LibIDN< 0:0.12-3.el5sat
perl-Net-LibIDN-debuginfo< 0:0.12-3.el5sat
perl-Net-SNMP< 0:4.0.3-10.el5 | < 0:6.0.1-3.el6sat
perl-NOCpulse-CLAC< 0:1.9.9-1.el5sat | < 0:1.9.9-1.el6sat
perl-NOCpulse-Debug< 0:1.23.17-1.el5sat | < 0:1.23.17-1.el6sat
perl-NOCpulse-Gritch< 0:1.27.11-1.el5sat | < 0:1.27.11-1.el6sat
perl-NOCpulse-Object< 0:1.26.12-1.el5sat | < 0:1.26.12-1.el6sat
perl-NOCpulse-OracleDB< 0:1.28.27-1.el5sat | < 0:1.28.27-1.el6sat
perl-NOCpulse-PersistentConnection< 0:1.10.1-1.el5sat | < 0:1.10.1-1.el6sat
perl-NOCpulse-Probe< 0:1.184.17-1.el5sat | < 0:1.184.17-1.el6sat
perl-NOCpulse-Probe-Oracle< 0:1.184.17-1.el5sat | < 0:1.184.17-1.el6sat
perl-NOCpulse-ProcessPool< 0:1.6.1-1.el5sat | < 0:1.6.1-1.el6sat
perl-NOCpulse-Scheduler< 0:1.58.12-1.el5sat | < 0:1.58.12-1.el6sat
perl-NOCpulse-SetID< 0:1.7.1-3.el5sat | < 0:1.7.1-3.el6sat
perl-NOCpulse-Utils< 0:1.14.12-1.el5sat | < 0:1.14.12-1.el6sat
perl-Params-Validate< 0:0.74-10.el5 | < 0:0.92-3.el6
perl-Params-Validate-debuginfo< 0:0.74-10.el5 | < 0:0.92-3.el6
perl-SOAP-Lite< 0:0.60a-11.el5 | < 0:0.710.10-3.el6
perl-XML-DOM< 0:1.44-1.el5
perl-XML-Generator< 0:1.01-6.el5sat | < 0:1.01-6.el6sat
perl-XML-RegExp< 0:0.03-2.el5
ProgAGoGo< 0:1.11.6-1.el5sat | < 0:1.11.6-1.el6sat
python-debian< 0:0.1.16-5.el5sat | < 0:0.1.16-5.el6sat
python-hashlib< 0:20081119-6.el5
python-hashlib-debuginfo< 0:20081119-6.el5
rhn-proxy-branding< 0:5.6.0.22-1.el5sat | < 0:5.6.0.22-1.el6sat
rhnlib< 0:2.5.22.1-6.el5 | < 0:2.5.22-15.el6
rhnpush< 0:5.5.65-5.el5sat | < 0:5.5.65-5.el6sat
SatConfig-bootstrap< 0:1.11.5-1.el5sat | < 0:1.11.5-1.el6sat
SatConfig-bootstrap-server< 0:1.13.5-1.el5sat | < 0:1.13.5-1.el6sat
SatConfig-cluster< 0:1.54.10-1.el5sat | < 0:1.54.10-1.el6sat
SatConfig-general< 0:1.216.29-1.el5sat | < 0:1.216.29-1.el6sat
SatConfig-generator< 0:2.29.14-1.el5sat | < 0:2.29.14-1.el6sat
SatConfig-installer< 0:3.24.6-1.el5sat | < 0:3.24.6-1.el6sat
SatConfig-spread< 0:1.1.3-1.el5sat | < 0:1.1.3-1.el6sat
satellite-branding< 0:5.6.0.22-1.el5sat | < 0:5.6.0.22-1.el6sat
scdb< 0:1.15.8-1.el5sat | < 0:1.15.8-1.el6sat
SNMPAlerts< 0:0.5.7-1.el5sat | < 0:0.5.7-1.el6sat
spacewalk-backend< 0:2.0.3-18.el5sat | < 0:2.0.3-18.el6sat
spacewalk-backend-libs< 0:2.0.3-18.el5sat | < 0:2.0.3-18.el6sat
spacewalk-base-minimal< 0:2.0.3-17.el5sat | < 0:2.0.3-17.el6sat
spacewalk-base-minimal-config< 0:2.0.3-17.el5sat | < 0:2.0.3-17.el6sat
spacewalk-certs-tools< 0:2.0.1-2.el5sat | < 0:2.0.1-2.el6sat
spacewalk-monitoring-selinux< 0:2.0.1-1.el5sat | < 0:2.0.1-1.el6sat
spacewalk-proxy< 0:2.0.1-8.el5sat | < 0:2.0.1-8.el6sat
spacewalk-proxy-broker< 0:2.0.1-8.el5sat | < 0:2.0.1-8.el6sat
spacewalk-proxy-common< 0:2.0.1-8.el5sat | < 0:2.0.1-8.el6sat
spacewalk-proxy-docs< 0:2.0.1-1.el5sat | < 0:2.0.1-1.el6sat
spacewalk-proxy-management< 0:2.0.1-8.el5sat | < 0:2.0.1-8.el6sat
spacewalk-proxy-monitoring< 0:2.0.1-1.el5sat | < 0:2.0.1-1.el6sat
spacewalk-proxy-package-manager< 0:2.0.1-8.el5sat | < 0:2.0.1-8.el6sat
spacewalk-proxy-redirect< 0:2.0.1-8.el5sat | < 0:2.0.1-8.el6sat
spacewalk-proxy-selinux< 0:2.0.1-1.el5sat | < 0:2.0.1-1.el6sat
spacewalk-setup-jabberd< 0:2.0.1-1.el5sat | < 0:2.0.1-1.el6sat
spacewalk-ssl-cert-check< 1:2.3-1.el5sat | < 1:2.3-1.el6sat
spacewalk-web< 0:2.0.3-17.el5sat | < 0:2.0.3-17.el6sat
SputLite< 0:1.10.1-1.el5sat | < 0:1.10.1-1.el6sat
SputLite-client< 0:1.10.1-1.el5sat | < 0:1.10.1-1.el6sat
SputLite-server< 0:1.10.1-1.el5sat | < 0:1.10.1-1.el6sat
ssl_bridge< 0:1.9.3-1.el5sat | < 0:1.9.3-1.el6sat
status_log_acceptor< 0:0.12.11-1.el5sat | < 0:0.12.11-1.el6sat
tsdb< 0:1.27.29-1.el5sat | < 0:1.27.29-1.el6sat
udns< 0:0.1-1.el5sat | < 0:0.1-1.el6sat
udns-debuginfo< 0:0.1-1.el5sat | < 0:0.1-1.el6sat

Show all 119

1 vendor · 119 products

References

10 links

access.redhat.com/security/cve/CVE-2012-5562VDB EntryX Refsource REDHATThird Party AdvisoryREPORT
access.redhat.com/security/cve/cve-2012-5562Third Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562Issue TrackingThird Party Advisory
bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562Issue TrackingThird Party Advisory
access.redhat.com/errata/RHEA-2013:1392AdvisoryVendor AdvisoryX Refsource REDHAT
bugzilla.redhat.com/show_bug.cgi?id=924174REPORT
security.access.redhat.com/data/csaf/v2/advisories/2013/rhea-2013_1392.jsonAdvisory
bugzilla.redhat.com/show_bug.cgi?id=879369REPORT
www.cve.org/CVERecord?id=CVE-2012-5562Advisory
nvd.nist.gov/vuln/detail/CVE-2012-5562Advisory