Red Hat Security AdvisoryRHSA-2017:0698
subscription-manager security, bug fix, and enhancement update
Released 2017-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) python-rhsm-1.18.6-1.el6, python-rhsm-certificates-1.18.6-1.el6, subscription-manager-1.18.10-1.el6 +4
- Red Hat Enterprise Linux Desktop Optional (v. 6) subscription-manager-plugin-container-1.18.10-1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) python-rhsm-1.18.6-1.el6, python-rhsm-certificates-1.18.6-1.el6, subscription-manager-1.18.10-1.el6 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) subscription-manager-firstboot-1.18.10-1.el6, subscription-manager-gui-1.18.10-1.el6, subscription-manager-plugin-container-1.18.10-1.el6
- Red Hat Enterprise Linux Server (v. 6) python-rhsm-1.18.6-1.el6, python-rhsm-certificates-1.18.6-1.el6, subscription-manager-1.18.10-1.el6 +4
- Red Hat Enterprise Linux Server Optional (v. 6) subscription-manager-plugin-container-1.18.10-1.el6
- Red Hat Enterprise Linux Workstation (v. 6) python-rhsm-1.18.6-1.el6, python-rhsm-certificates-1.18.6-1.el6, subscription-manager-1.18.10-1.el6 +4
- Red Hat Enterprise Linux Workstation Optional (v. 6) subscription-manager-plugin-container-1.18.10-1.el6
Fixes 1 record
Priority LOW 16
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information b…
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00453 · Published 2017-04-14 · Partial fix CWE-264
