Description (CNA)
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / candlepin-4.3.7 | unaffected 3 |
| n/a / candlepin-4.3.8 | unaffected 1 |
| Red Hat / Red Hat Satellite 6 | affected |
CWE
CWE-284
References
- https://access.redhat.com/security/cve/CVE-2023-1832
- https://bugzilla.redhat.com/show_bug.cgi?id=2184364
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.