Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2013-6439

candlepin: insecure authentication enabled by default

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.

CVSS 2.0 · 9.3 Critical EPSS 1.6% KEV · Not listed
Vendors
Redhat Rhel Sam
Products
Subscription Asset Manager 1.3