GCVE - cpe:2.3:a:redhat:subscription_asset_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:subscription_asset_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Subscription Asset Manager (`4d542fee-8248-59ce-8775-70f37e3ec2ea`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/redhat/subscription-manager`	purl2cpe	2026-06-01 10:12:54.976887

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0130`	vulnerable	2026-06-08 05:05:11.715476	Details available Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request. Published: 2014-05-07T10:00:00.000Z Updated: 2025-10-22T00:05:37.800Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2014-1863.html http://matasano.com/research/AnatomyOfRailsVuln-CVE-2014-0130.pdf https://groups.google.com/forum/message/raw?msg=rubyonrails-security/NkKc7vTW70o/NxW_PDBSG3AJ http://www.securityfocus.com/bid/67244	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1823`	vulnerable	2026-06-08 05:03:56.607160	Details available Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field. Published: 2013-04-02T22:00:00.000Z Updated: 2024-08-06T15:13:33.312Z Open on db.gcve.eu Reference links http://secunia.com/advisories/52774 http://www.osvdb.org/91718 https://bugzilla.redhat.com/show_bug.cgi?id=918784 http://rhn.redhat.com/errata/RHSA-2013-0686.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6119`	vulnerable	2026-06-08 05:02:59.559393	Details available Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests. Published: 2013-04-02T22:00:00.000Z Updated: 2024-08-06T21:28:38.981Z Open on db.gcve.eu Reference links http://secunia.com/advisories/52774 http://www.osvdb.org/91719 https://bugzilla.redhat.com/show_bug.cgi?id=908613 https://github.com/candlepin/candlepin/blob/master/candlepin.spec http://rhn.redhat.com/errata/RHSA-2013-0686.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.