Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-4142

Date: August 24, 2022

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.

Language: Ruby

Severity Score

Related Resources (9)

https://github.com/candlepin/candlepin/pull/3199
https://access.redhat.com/errata/RHSA-2022:5498
https://bugzilla.redhat.com/show_bug.cgi?id=2034346
https://nvd.nist.gov/vuln/detail/CVE-2021-4142
https://access.redhat.com/security/cve/CVE-2021-4142
https://github.com/candlepin/candlepin/pull/3198
https://access.redhat.com/errata/RHSA-2022:0790
https://github.com/candlepin/candlepin/pull/3197
https://www.mend.io/vulnerability-database/CVE-2021-4142

Severity Score

Weakness Type (CWE)

Authentication Issues

CWE-287

Authorization Bypass Through User-Controlled Key

CWE-639

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us