PT-2013-6046 · Red Hat · Candlepin+1

Adrian Likins + 1 · Publicado 2013-12-23 · Atualizado 2023-02-13 · CVE-2013-6439

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Subscription Asset Manager versions 1.0 through 1.3

Description The issue concerns a weak authentication scheme used by Candlepin in Red Hat Subscription Asset Manager when the configuration file does not specify a scheme. This has an unspecified impact and attack vectors.

Recommendations For versions 1.0 through 1.3, consider specifying a secure authentication scheme in the configuration file to mitigate the risk of exploitation. As a temporary workaround, review and strengthen the authentication configuration to minimize potential vulnerabilities.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-6439

Produtos afetados

Candlepin

Red Hat Subscription Asset Manager

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-6439 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1042677 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90134 · Nota
• http://rhn.redhat.com/errata/RHSA-2013-1863.html · Aviso do Fabricante