Total vulnerabilities in the database
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
| Software | From | Fixed in |
|---|---|---|
| candlepinproject / candlepin | - | 4.3.7-3 |
| redhat / satellite | 6.0 | 6.0.x |