Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat Subscription Asset Manager Candlepin安全漏洞
Vulnerability Description
Red Hat Subscription Asset Manager是美国红帽（Red Hat）公司的一套用于在客户端机器中处理订阅信息和软件更新的订阅管理程序。 Red Hat Subscription Asset Manager 1.2.1之前版本中使用的Candlepin 0.7.24之前版本中存在漏洞，该漏洞源于程序没有正确检查清单签名。本地攻击者利用该漏洞修改清单。
CVSS Information
N/A
Vulnerability Type
N/A