candlepinproject kayıtları
candlepinproject üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-284 Improper Access Control1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2023-1832İstismar yok | Improper authorization check in the server componentcandlepinproject · candlepin · CWE-284 | Yüksek8,1 | — | %0,5 | 4 Eki 2023 |
27İzleyin | CVE-2015-5187İstismar yok | Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web trafficandlepinproject · candlepin · CWE-200 | Orta6,5 | — | %2,0 | 25 Tem 2017 |
22İzleyin | CVE-2021-4142İstismar yok | The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw.candlepinproject · candlepin · CWE-639 | Orta5,5 | — | %0,1 | 24 Ağu 2022 |
8İzleyin | CVE-2012-6119İstismar yok | Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allocandlepinproject · candlepin · CWE-264 | Düşük2,1 | — | %0,4 | 2 Nis 2013 |
- CVE-2023-183232İzleyin
Improper authorization check in the server component
YüksekCVSS 8,1İstismar yokEPSS %0candlepinproject · candlepin4 Eki 2023
- CVE-2015-518727İzleyin
Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffi
OrtaCVSS 6,5İstismar yokEPSS %2candlepinproject · candlepin25 Tem 2017
- CVE-2021-414222İzleyin
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw.
OrtaCVSS 5,5İstismar yokEPSS %0candlepinproject · candlepin24 Ağu 2022
- CVE-2012-61198İzleyin
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allo
DüşükCVSS 2,1İstismar yokEPSS %0candlepinproject · candlepin2 Nis 2013