Known Vulnerabilities for products from Candlepinproject
Listed below are 4 of the newest known vulnerabilities associated with the vendor "Candlepinproject".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-1832 json | An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, whi... | 8.1 - HIGH | 2023-10-04 | 2023-11-07 |
| CVE-2021-4142 json | The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an atta... | 5.5 - MEDIUM | 2022-08-24 | 2023-11-07 |
| CVE-2015-5187 json | Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of exces... | 6.5 - MEDIUM | 2017-07-25 | 2017-07-31 |
| CVE-2012-6119 json | Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatu... | 2.1 - LOW | 2013-04-02 | 2013-04-03 |
Known software with vulnerabilities from Candlepinproject
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Candlepinproject | Candlepin | - |