Candlepin-4.3.8 vulnerabilities
We track 1 vulnerability in Candlepin-4.3.8 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 4, 2023.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Candlepin-4.3.8 vulnerabilities
- 8.1 High severity
candlepin-4.3.7: Incorrect Authorization
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.