Vendor/product archive

redhat / subscription-manager CVEs

Beta · best-effort

3 CVEs tagged to redhat / subscription-manager — 0 Critical, 2 High, 0 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to redhat vendor archive

CVE-2023-3899

Published Aug 23, 2023

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significan…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2017-2663

Published Jul 27, 2018

It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An…

CVSS 8.2 · High

Vendor/product tagsBeta · best-effort

CVE-2016-4455

Published Apr 14, 2017

The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows loca…

CVSS 3.3 · Low

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1