Read the docs
Red Hat Security Advisory

RHSA-2013:1863

candlepin security update

Released 2013-12-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 43

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01571 Published 2013-12-23 Fixed CWE-287