| Package | Affected versions | Patched versions |
|---|---|---|
| subscription-manager | ≤ 1.17.6-1 |
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free