NVD

Id
41495  
Name
CVE-2013-6439  
Description
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-12-23  
Modified Date
2014-01-17  
Seq
2013-6439  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209700 41495 CVE-2013-6439 RHSA-2013:1863  View
209701 41495 CVE-2013-6439 candlepin-redhat-cve20136439-unspecified(90134)  View
209702 41495 CVE-2013-6439 https://bugzilla.redhat.com/show_bug.cgi?id=1042677  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24124 JVNDB-2013-005699 Red Hat Subscription Asset Manager の Candlepin における脆弱性 Red Hat Subscription Asset Manager の Candlepin は、設定ファイルがスキームを特定しない場合、脆弱な認証スキームを使用するため、不特定の影響を受ける脆弱性が存在します。 CVE-2013-6439 66381 CVE-2013-6439 41495 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005699.html 2013-12-19 2013-12-25 View