CVE-2021-4142CWE-639

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw

published August 24, 2022

CVSS
—
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2022-08-24T15:09Z
EPSS history
Timeline
  • 24 AUG 15:09Z
    The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw
    cvelistv5