CVE-2014-0026

katello-headpin is vulnerable to CSRF in REST API

Score

CVSS 3.1 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2019-12-11

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Katello-headpin (Katello-headpin)
• Subscription Asset Manager (Redhat)

References

• https://access.redhat.com/security/cve/cve-2014-0026
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0026