Authorization bypass in candlepin
Priority LOW 24CWE-639Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-639.
Summary
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
Why it matters now
EPSS 0.00176 7th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | candlepin | Affects v3.1.28-2, v3.2.21-1, v4.1.8-1 and earlier are affected. | — | No fix listed | CNA |
- candlepin Vendor— Affected Affects v3.1.28-2, v3.2.21-1, v4.1.8-1 and earlier are affected. Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:candlepinproject:candlepin:*:*:*:*:*:*:*:* | 3.1.0 – 3.1.28-2; 3.2.0 – 3.2.21-1; 4.1.0 – 4.1.8-1 | Vulnerable | Candlepinproject |
- cpe:2.3:a:candlepinproject:candlepin:*:*:*:*:*:*:*:* Versions 3.1.0 – 3.1.28-2; 3.2.0 – 3.2.21-1; 4.1.0 – 4.1.8-1 Vulnerable ·Candlepinproject
Remediation
Red Hat 2 advisories
- RHSA-2022:5498 Released 2022-07-05 · Red Hat rating ModerateSatellite 6.11 Release
- Red Hat Satellite 6.11 for RHEL 7 candlepin-4.1.13-1.el7sat, foreman-3.1.1.21-2.el7sat, libsolv-0.7.22-1.el7pc +4
- Red Hat Satellite 6.11 for RHEL 8 candlepin-4.1.13-1.el8sat, foreman-3.1.1.21-2.el8sat, libsolv-0.7.22-1.el8pc +8
- RHSA-2022:0790 Released 2022-03-08 · Red Hat rating LowSatellite 6.10.3 Async Bug Fix Update
- Red Hat Satellite 6.10 candlepin-4.0.15-1.el7sat, candlepin-selinux-4.0.15-1.el7sat
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Satellite 6.10 | Fixed | RHSA-2022:0790 |
| Red Hat Satellite 6.11 for RHEL 7 | Fixed | RHSA-2022:5498 |
| Red Hat Satellite 6.11 for RHEL 8 | Fixed | RHSA-2022:5498 |
Not affected: 4 products
- Red Hat Satellite 6.10
- Red Hat Satellite 6.11 for RHEL 7
- Red Hat Satellite 6.11 for RHEL 8
- Red Hat Satellite Capsule 6.10
Timeline
- 2026-10-02 Threatist record created from CVE-2021-4142
- 2026-10-03 Alias added: GHSA-qjqc-gw55-mpmx
References
More Candlepinproject Candlepin vulnerabilities
- TI-2023-01720 Improper authorization check in the server component CVSS 3.1HIGH 8.1
- TI-2015-04355 Candlepin allows remote attackers to obtain sensitive information by obtaining Java… CVSS 3.0MEDIUM 6.5
- TI-2012-05083 Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does… CVSS 2.0LOW 2.1
Sources
- CVE-2021-4142 · CVE Program
- CVE-2021-4142 · NVD
- FIRST EPSS
- GHSA-qjqc-gw55-mpmx · GitHub Advisory Database · CC BY 4.0
- CVE-2021-4142 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences