Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1
CVE-2023-1832
- EPSS 0.12%
- Published 04.10.2023 14:15:10
- Last modified 21.11.2024 07:39:59
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
5.5
CVE-2021-4142
- EPSS 0.1%
- Published 24.08.2022 16:15:09
- Last modified 21.11.2024 06:36:59
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
6.5
CVE-2015-5187
- EPSS 0.35%
- Published 25.07.2017 18:29:00
- Last modified 20.04.2025 01:37:25
Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.
2.1
CVE-2012-6119
- EPSS 0.05%
- Published 02.04.2013 22:55:01
- Last modified 11.04.2025 00:51:21
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
1