Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2015-5187

candlepin: subscription-manager encounters frequent Runtime Error Lock wait timeout exceeded

Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Candlepinproject
Products
Candlepin
CVE-2023-1832

Improper authorization check in the server component

An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Candlepinproject Redhat
Products
Candlepin Satellite
CVE-2021-4142

Satellite: Allow unintended SCA certificate to authenticate Candlepin

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Candlepinproject Redhat
Products
Candlepin Satellite Satellite Capsule and 1 more