277 matches found
subscription-manager: sensitive world readable files in /var/lib/rhsm/
It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack...
Moderate: Red Hat Security Advisory: subscription-manager security, bug fix, and enhancement update
An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2016-4455
It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack...
RedHat Update for subscription-manager RHSA-2016:2592-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : subscription-manager (RHSA-2016:2592)
An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...
subscription-manager: sensitive world readable files in /var/lib/rhsm/
It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack...
PT-2017-8492 · Red Hat +1 · Subscription-Manager +2
Name of the Vulnerable Software and Affected Versions: Subscription Manager versions prior to 1.17.7-1 Description: The issue concerns weak permissions set for cache directories in the Subscription Manager package, allowing local users to access sensitive information by reading files in these...
Candlepin 'subscription-manager' Insecure File Permissions Vulnerability
Candlepin is a collection of subscription tools that allow companies to manage their software. An insecure file permission vulnerability exists in Candlepin 'subscription-manager'. A local attacker could gain access to world-readable files and extract sensitive information from them...
OracleVM 3.2 : sos (OVMSA-2016-0078)
The remote OracleVM system is missing necessary patches to address critical security updates : - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile - Strip passwords from grub.conf and...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-gui-1.1.23.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-migration-1.0.24.1 package in the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-1.1.23.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-firstboot-1.0.24.1 package of the Red Hat Enterprise Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-gui-1.0.24.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-debuginfo-1.1.23.1 package in the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-firstboot-1.1.23.1 package of the Red Hat Enterprise Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-1.0.24.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of the integrity of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-debuginfo-1.0.24.1 package in the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the subscription-manager-migration-1.1.23.1 package in the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
ipa and slapi-nis security and bug fix update
ipa 4.1.0-18.0.1.el71.3 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18.3 - ipa-python ipalib.errors.LDAPError: failed to decode certificate:...