NetSight
IP …
critical9.3

CVE-2013-6439

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which …

Impact

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.

Affected products

VendorProductAffected versions
RedhatSubscription Asset Manager
Versions 1.0.0, 1.1.0, 1.2.0, 1.2.1, 1.3.0

Weakness classification

CWE-287

References