CVE-2012-6119
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not...
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
Exploit likelihood
What each source reports
NVD Score used
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
- Record
CVE-2012-6119- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
- Record
CVE-2012-6119- Updated
- 2026-11-02
EUVDEUVD-2012-5986 No score
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
- Record
EUVD-2012-5986- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jffh-2rxm-9wjg No score
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not...
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
- Record
GHSA-jffh-2rxm-9wjg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6119 is a low vulnerability (CVSS 2.1) in Candlepinproject Candlepin, published April 2, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. No source names a fixed version.
References
secunia.com/advisories/52774
osvdb.org/91719
bugzilla.redhat.com/show_bug.cgi?id=908613
github.com/candlepin/candlepin/blob/master/candlepin.spec
rhn.redhat.com/errata/RHSA-2013-0686.html
nvd.nist.gov/vuln/detail/CVE-2012-6119