Description
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | candlepin-4.3.7 | — | 3 |
| — | candlepin-4.3.8 | — | 1 |
| Red Hat | Red Hat Satellite 6 | — | — |
References
- https://access.redhat.com/security/cve/CVE-2023-1832 vdb-entry
- RHBZ#2184364 issue-tracking