The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subscription-manager-firstbootUpgrade python-rhsm-certificatesUpgrade subscription-managerUpgrade subscription-manager-migrationUpgrade python-rhsmUpgrade subscription-manager-debuginfoUpgrade subscription-manager-guiUpgrade subscription-manager-migration-dataUpgrade subscription-manager-plugin-containerUpgrade python-rhsm-debuginfo | Aug 28, 2019 | Apr 14, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade subscription-manager-guiUpgrade subscription-managerUpgrade python-rhsm-certificatesUpgrade python-rhsm | Nov 30, 2017 | Apr 14, 2017 |
| Redhat_linux | — | No solution existsUpgrade python-rhsm-debuginfoUpgrade python-rhsmUpgrade subscription-managerUpgrade subscription-manager-debuginfoUpgrade subscription-manager-firstbootUpgrade subscription-manager-migrationUpgrade subscription-manager-plugin-containerUpgrade subscription-manager-migration-dataUpgrade python-rhsm-certificatesUpgrade subscription-manager-gui | Nov 4, 2016 | Nov 3, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub