Known Vulnerabilities for products from Candlepinproject

Listed below are 2 of the newest known vulnerabilities associated with the vendor "Candlepinproject".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2015-5187 Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of exces... 6.5 - MEDIUM 2017-07-25 2017-07-31
CVE-2012-6119 Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatu... 2.1 - LOW 2013-04-02 2013-04-03

Known software with vulnerabilities from Candlepinproject

Type Vendor Product Version
ApplicationCandlepinprojectCandlepin-