CVE-2023-1832
Improper authorization check in the server component
概要
Improper authorization check in the server component
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
参照URL
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web access.redhat.com