Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1
CVE-2023-1832
- EPSS 0.12%
- Veröffentlicht 04.10.2023 14:15:10
- Zuletzt bearbeitet 21.11.2024 07:39:59
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
5.5
CVE-2021-4142
- EPSS 0.1%
- Veröffentlicht 24.08.2022 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:36:59
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
6.5
CVE-2015-5187
- EPSS 0.35%
- Veröffentlicht 25.07.2017 18:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.
2.1
CVE-2012-6119
- EPSS 0.05%
- Veröffentlicht 02.04.2013 22:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
1