Description
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
Unscored
CVE-2012-6119
EUVD-2012-5986GHSA-jffh-2rxm-9wjg
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which all…
Published Apr 2, 2013 · Updated Aug 6, 2024 · Assigned by redhat