Description
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1042677
- RHSA-2013:1863 vendor-advisory
- candlepin-redhat-cve20136439-unspecified(90134) vdb-entry