medium6.8
CVE-2023-1832
An improper access control flaw was found in Candlepin.
Impact
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Candlepinproject | Candlepin | before 4.3.7-3 |
| Redhat | Satellite | Version 6.0 |