Subscription-manager (Redhat) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 395 known versions, newest CVE from 2023-08-23. Vendor: Redhat.

CVEs of Subscription-manager

• CVE-2023-3899 - CVSS 7.8 (high), 2023-08-23: A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1…
• CVE-2017-2663 - CVSS 8.2 (high), 2018-07-27: It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and…
• CVE-2016-4455 - CVSS 3.3 (low), 2017-04-14: The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache…