Description
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a candlepin-4.3.7
3unaffected
n/a candlepin-4.3.8
1unaffected
Red Hat Red Hat Satellite 6
Default version status: affected