CVE-2015-5187

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0220%

EPSS Percentile3.28th

Published2017年7月25日

Last Modified2026年5月13日

Vulnerability Description

Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.

📦

Candlepinproject

All versions

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does...

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials ...

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker ...

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-instal...