Описание
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Satellite 6 | candlepin | Not affected | ||
| Red Hat Subscription Asset Manager 1.3 | candlepin | Fixed | RHSA-2013:1863 | 19.12.2013 |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-1188
https://bugzilla.redhat.com/show_bug.cgi?id=1042677candlepin: insecure authentication enabled by default
EPSS
Процентиль: 73%
0.01571
Низкий
9 Critical
CVSS2
Связанные уязвимости
nvd
больше 12 лет назад
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
github
около 4 лет назад
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
EPSS
Процентиль: 73%
0.01571
Низкий
9 Critical
CVSS2