CVE-2021-4142

EPSS 0.2%CWE-639

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

24 Aug 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.

Affected products

n/a · candlepin

References

https://access.redhat.com/security/cve/CVE-2021-4142 https://bugzilla.redhat.com/show_bug.cgi?id=2034346 https://github.com/candlepin/candlepin/pull/3197 https://github.com/candlepin/candlepin/pull/3198 https://github.com/candlepin/candlepin/pull/3199