CVE-2013-6439

Published: Dec 23, 2013Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.

Affected (5)

Products: Redhat: Subscription Asset Manager

Redhat

1 product

Subscription Asset Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Redhat Subscription Asset Manager	Version 1.0.0
Redhat Subscription Asset Manager	Version 1.1.0
Redhat Subscription Asset Manager	Version 1.2.0
Redhat Subscription Asset Manager	Version 1.2.1
Redhat Subscription Asset Manager	Version 1.3.0