CVE-2012-6119
No CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- candlepinproject:candlepin
- redhat:subscription_asset_manager