Login Request a demo
CA
Product
Candlepin
by Candlepinproject · last CVE Oct 4, 2023
4
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities4Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Candlepin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1832
8.1
1%
Oct 4
An improper access control flaw was found in Candlepin
Affected: before 4.3.7-3
CVE-2015-5187
6.5
2%
Jul 25
Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic
Affected: All versions, or not specified
CVE-2021-4142
5.5
0%
Aug 24
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw
Affected: 3.1.0 through 3.1.28-2; 3.2.0 through 3.2.21-1; 4.1.0 through 4.1.8-1
CVE-2012-6119
–
0%
Apr 2
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests
Affected: through 0.7.2; 0.4.5; 0.4.11; 0.4.27; 0.5.5; 0.6.3
Showing 4