TI-2023-01720 CVE-2023-1832 · GHSA-4pcg-gfm2-cvg4
Improper authorization check in the server component
Priority LOW 36
An improper access control flaw was found in Candlepin.
Vulnerabilities
4 records
TI-2021-03016 CVE-2021-4142 · GHSA-qjqc-gw55-mpmx
Authorization bypass in candlepin
Priority LOW 24
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw.
TI-2015-04355 CVE-2015-5187 · GHSA-hggm-5x62-r6vr
Candlepin allows remote attackers to obtain sensitive information by obtaining Java…
Priority LOW 33
Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.
TI-2012-05083 CVE-2012-6119 · GHSA-jffh-2rxm-9wjg
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does…
Priority LOW 12
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.