A vulnerability was found in Candlepin up to 0.7.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-264. As an impact it is known to affect integrity. The summary by CVE is:

Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.

The weakness was published 04/02/2013 (Website). The advisory is shared at github.com. This vulnerability is known as CVE-2012-6119 since 12/06/2012. The exploitation appears to be easy. An attack has to be approached locally. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 65904 , which helps to determine the existence of the flaw in a target environment.

Upgrading to version 0.4.11 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (65904). Similar entries are available at 63926, 63666 and 63662.

Productinfo

Name

• Candlepin

Version

• 0.4.5
• 0.4.11
• 0.4.27
• 0.5.5
• 0.6.3
• 0.7.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion