Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2013-04-02T22:00:00Z
Updated: 2013-04-02T22:00:00Z
Reserved: 2012-12-06T00:00:00Z
Link: CVE-2012-6119
JSON object: View
NVD Information
Status : Analyzed
Published: 2013-04-02T22:55:01.237
Modified: 2013-04-03T04:00:00.000
Link: CVE-2012-6119
JSON object: View
Redhat Information
No data.
CWE