| Package | Affected versions | Patched versions |
|---|---|---|
| candlepin | < 4.3.7-3 | 4.3.7-3 |
| satellite | = 6.0 |
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free