Red Hat Security AdvisoryRHSA-2016:2592
subscription-manager security, bug fix, and enhancement update
Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python-rhsm-1.17.9-1.el7, python-rhsm-certificates-1.17.9-1.el7, subscription-manager-1.17.15-1.el7 +5
- Red Hat Enterprise Linux Client Optional (v. 7) subscription-manager-plugin-ostree-1.17.15-1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) python-rhsm-1.17.9-1.el7, python-rhsm-certificates-1.17.9-1.el7, subscription-manager-1.17.15-1.el7 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) subscription-manager-gui-1.17.15-1.el7, subscription-manager-initial-setup-addon-1.17.15-1.el7, subscription-manager-plugin-ostree-1.17.15-1.el7
- Red Hat Enterprise Linux Server (v. 7) python-rhsm-1.17.9-1.el7, python-rhsm-certificates-1.17.9-1.el7, subscription-manager-1.17.15-1.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) subscription-manager-plugin-container-1.17.15-1.el7, subscription-manager-plugin-ostree-1.17.15-1.el7
- Red Hat Enterprise Linux Workstation (v. 7) python-rhsm-1.17.9-1.el7, python-rhsm-certificates-1.17.9-1.el7, subscription-manager-1.17.15-1.el7 +5
- Red Hat Enterprise Linux Workstation Optional (v. 7) subscription-manager-plugin-ostree-1.17.15-1.el7
Fixes 1 record
Priority LOW 16
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information b…
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00453 · Published 2017-04-14 · Partial fix CWE-264
