TI-2023-01720 CVE-2023-1832 · GHSA-4pcg-gfm2-cvg4
Improper authorization check in the server component
Priority LOW 36
An improper access control flaw was found in Candlepin.
Candlepinproject
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Candlepinproject records in CISA KEVNo Candlepinproject vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2015-04355 CVE-2015-5187 · GHSA-hggm-5x62-r6vr
Candlepin allows remote attackers to obtain sensitive information by obtaining Java…
Priority LOW 33
Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.
TI-2021-03016 CVE-2021-4142 · GHSA-qjqc-gw55-mpmx
Authorization bypass in candlepin
Priority LOW 24
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw.
TI-2012-05083 CVE-2012-6119 · GHSA-jffh-2rxm-9wjg
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does…
Priority LOW 12
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.