subscription-manager vulnerabilities

CVEs whose affected-version data names the subscription-manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2023-3899High· 7.8

3y ago

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the sta…

▾ TwilightRed Hat · subscription-managerEPSS 0.24%via CVEORG