CVE-2023-1832
Improper authorization check in the server component
Résumé
Improper authorization check in the server component
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web access.redhat.com