The vulnerability of the Candlepin software’s subscription management tools is related to improper access control, allowing a malicious actor to gain access to confidential information.

The vulnerability of the Candlepin software’s subscription management tools is related to improper access control, allowing a malicious actor to gain access to confidential information...

ROS-20251006-03

A vulnerability in a set of tools that allow companies to manage software subscriptions Candlepin is related to the ability to create data related to another client/tenant. Exploitation vulnerability could allow an attacker acting remotely to gain access to sensitive information...