Total vulnerabilities in the database
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
| Software | From | Fixed in |
|---|---|---|
| redhat / subscription_asset_manager | 1.1.0 | 1.1.0.x |
| redhat / subscription_asset_manager | 1.0.0 | 1.0.0.x |
| redhat / subscription_asset_manager | 1.2.0 | 1.2.0.x |
| redhat / subscription_asset_manager | 1.2.1 | 1.2.1.x |
| redhat / subscription_asset_manager | 1.3.0 | 1.3.0.x |