CVE

Id
59380  
CVE No.
CVE-2012-6137  
Status
Candidate  
Description
rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server"s X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
604891 59380 CVE-2012-6137 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=885130  View
604892 59380 CVE-2012-6137 REDHAT:RHSA-2013:0788  View
604893 59380 CVE-2012-6137 URL:http://rhn.redhat.com/errata/RHSA-2013-0788.html  View
604894 59380 CVE-2012-6137 BID:59674  View
604895 59380 CVE-2012-6137 URL:http://www.securityfocus.com/bid/59674  View
604896 59380 CVE-2012-6137 OSVDB:93058  View
604897 59380 CVE-2012-6137 URL:http://osvdb.org/93058  View
604898 59380 CVE-2012-6137 SECTRACK:1028520  View
604899 59380 CVE-2012-6137 URL:http://www.securitytracker.com/id/1028520  View
604900 59380 CVE-2012-6137 SECUNIA:53330  View
604901 59380 CVE-2012-6137 URL:http://secunia.com/advisories/53330  View
604902 59380 CVE-2012-6137 XF:redhat-ssl-cve20126137-sec-bypass(84020)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30524 JVNDB-2012-006232 Perl 用 HTML::EP モジュールの Session::Cookie における任意のコードを実行される脆弱性 Perl 用 HTML::EP モジュールの Session::Cookie は、Storable::thaw 関数を適切に使用しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-6142 59380 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006232.html  View