Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes two security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2012-6137

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials...

Code injection

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials...

CVE-2012-6137

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials...

CVE-2012-6137

The CVE refers to a vulnerability in the subscription-manager tool (rhn-migrate-classic-to-rhsm) where the Red Hat Network Classic server’s X.509 certificate is not verified during migration to the Certificate-based Red Hat Network. This is a MITM risk that could allow an attacker to obtain sensi...

CVE-2012-6137

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials...

CVE-2012-6137: Undefined Security Weakness

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials...

RedHat Update for subscription-manager RHSA-2013:0788-01

Check for the Version of subscription-manager OpenVAS Vulnerability Test RedHat Update for subscription-manager RHSA-2013:0788-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

RedHat Update for subscription-manager RHSA-2013:0788-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 / 6 : subscription-manager (RHSA-2013:0788)

Updated subscription-manager packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Moderate: Red Hat Security Advisory: subscription-manager security update

Updated subscription-manager packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

PT-2013-1196

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux subscription-manager versions 1.0.24.1 through 1.1.23.1 Red Hat Enterprise Linux subscription-manager-debuginfo versions 1.0.24.1 through 1.1.23.1 Red Hat Enterprise Linux subscription-manager-gui versions 1.0.24.1...

Katello: Notifications page Username XSS

Cross-site scripting XSS vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2011-5136

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter...

CVE-2011-5136

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter...

Code injection

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter...

CVE-2011-5136

The CVE affects showImg.php in EPractize Labs Subscription Manager (likely version 1.0). A remote attacker can overwrite arbitrary files via the db parameter, indicating a file-write risk due to unsafely handled input. The publicly available description confirms impact as arbitrary file overwrite...

CVE-2011-5136

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter...

PT-2012-2114

Name of the Vulnerable Software and Affected Versions EPractize Labs Subscription Manager version 1.0 Description The issue allows remote attackers to overwrite arbitrary files. This is achieved via the db parameter in the showImg.php file. Recommendations For EPractize Labs Subscription Manager...

CVE-2011-5136: Improper Input Validation

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter...