Red Hat Subscription Asset Manager 1.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:subscription_asset_manager:1.1.0:*:*:*:*:*:*:*

part: a version: 1.1.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductSubscription Asset Manager (4d542fee-8248-59ce-8775-70f37e3ec2ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/redhat/subscription-manager purl2cpe 2026-06-01 10:12:54.976891

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6439 vulnerable 2026-06-08 05:04:56.824111 Details available
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
Published: 2013-12-23T22:00:00.000Z
Updated: 2024-08-06T17:39:01.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1823 vulnerable 2026-06-08 05:03:56.608429 Details available
Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.
Published: 2013-04-02T22:00:00.000Z
Updated: 2024-08-06T15:13:33.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6119 vulnerable 2026-06-08 05:02:59.560673 Details available
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
Published: 2013-04-02T22:00:00.000Z
Updated: 2024-08-06T21:28:38.981Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.