CVE-2013-4480: Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user...

Security readout for executives and security teams

Red Hat Satellite 5.6 and earlier could leave the initial first-user setup web interface available after it should be disabled. A remote attacker could use that condition to create an administrator account. For organizations still running affected Satellite versions, this is a serious identity and infrastructure-control risk. Exposure is limited to environments running Red Hat Satellite 5.6 or earlier, especially if the Satellite web interface is reachable by untrusted networks. The bundle does not identify other affected products. Treat this as high priority for any legacy Satellite deployment because attacker-created administrator accounts can compromise systems management operations. Priority is lower only where Satellite is retired, patched, or not network-reachable. Mitigation focus: Apply the relevant Red Hat advisories RHSA-2013-1513 and RHSA-2013-1514 where applicable.; Review Red Hat guidance for exact package and configuration remediation steps.; Restrict Satellite web interface access to trusted administrative networks..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.