Lucene search

K
redhatRedHatRHSA-2023:4701
HistoryAug 22, 2023 - 3:20 p.m.

(RHSA-2023:4701) Moderate: subscription-manager security update

2023-08-2215:20:56
access.redhat.com
55
subscription-manager
security update
entitlement platform
authorization vulnerability
cve-2023-3899
red hat

0.0004 Low

EPSS

Percentile

5.1%

The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Red Hat entitlement platform.

Security Fix(es):

  • subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.