Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2013-6439

Disclosure Date: December 23, 2013 (last updated October 05, 2023)
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
0
0
Attacker Value
Unknown

CVE-2012-6119

Disclosure Date: April 02, 2013 (last updated October 05, 2023)
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
0
0
Attacker Value
Unknown

CVE-2013-1823

Disclosure Date: April 02, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.
0
0