2013-12-22

2013-12-23

2013-12-24

All (1) Critical (1) High (2) Medium (18) Low (1)

CVE-2013-6439 Dec 23, 22:55 CRITICAL Act Now

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Red Hat Subscription Asset Manager

NVD

CVSS 2.0

9.3

EPSS

0.4%