{"id":"CVE-2016-4455","aliases":["EUVD-2016-5444","GHSA-q3jw-m6vv-gg29","RHSA-2016:2592","RHSA-2017:0698"],"status":"published","title":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses...","description":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00453,"percentile":0.39599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2017-04-14T18:00:00Z","modified":"2026-10-20T10:47:31Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-debuginfo","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-plugin-ostree","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-rhsm","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-rhsm-certificates","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-rhsm-debuginfo","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-gui","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-initial-setup-addon","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-migration","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-migration-data","fixed_in":["0:2.0.31-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-plugin-container","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-debuginfo","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-gui","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-initial-setup-addon","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-plugin-ostree","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-rhsm","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-rhsm-certificates","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-rhsm-debuginfo","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-migration","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-migration-data","fixed_in":["0:2.0.31-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-plugin-container","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-debuginfo","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-plugin-container","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-plugin-ostree","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-rhsm","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-rhsm-certificates","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-rhsm-debuginfo","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-gui","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-initial-setup-addon","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-migration","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-migration-data","fixed_in":["0:2.0.31-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-debuginfo","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-plugin-ostree","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-rhsm","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-rhsm-certificates","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-rhsm-debuginfo","fixed_in":["0:1.17.9-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-gui","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-initial-setup-addon","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-migration","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-migration-data","fixed_in":["0:2.0.31-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-plugin-container","fixed_in":["0:1.17.15-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-debuginfo","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-plugin-container","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-rhsm","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-rhsm-certificates","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-rhsm-debuginfo","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-firstboot","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-gui","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-migration","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-migration-data","fixed_in":["0:2.0.34-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-debuginfo","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-firstboot","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-gui","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-plugin-container","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-rhsm","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-rhsm-certificates","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-rhsm-debuginfo","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-migration","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-migration-data","fixed_in":["0:2.0.34-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-debuginfo","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-plugin-container","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-rhsm","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-rhsm-certificates","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-rhsm-debuginfo","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-firstboot","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-gui","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-migration","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-migration-data","fixed_in":["0:2.0.34-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-debuginfo","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-plugin-container","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-rhsm","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-rhsm-certificates","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-rhsm-debuginfo","fixed_in":["0:1.18.6-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-firstboot","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-gui","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-migration","fixed_in":["0:1.18.10-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-migration-data","fixed_in":["0:2.0.34-1.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-plugin-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-initial-setup-addon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.31-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-initial-setup-addon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-plugin-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.31-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-plugin-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-initial-setup-addon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.31-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-plugin-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.9-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-initial-setup-addon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.31-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.15-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-firstboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.34-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-firstboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.34-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-firstboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.34-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-plugin-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-rhsm-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-rhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.6-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-firstboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.10-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"subscription-manager-migration-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.34-1.el6"}]}]}],"products":[{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_hpc_node"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"subscription-manager"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340525","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","VDB Entry","fix","report"]},{"url":"http://www.securitytracker.com/id/1038083","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/26/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/93926","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2592.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/candlepin/subscription-manager/commit/9dec31","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/candlepin/subscription-manager/blob/subscription-manager-1.17.7-1/subscription-manager.spec","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0698.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4455","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2592","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0698","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4455","tags":["report"]},{"url":"https://github.com/advisories/GHSA-q3jw-m6vv-gg29"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1251516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1345962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372673","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2592.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4455","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1176219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417746","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0698.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-4455","description":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.","status":"published","published":"2017-04-14T18:00:00Z","modified":"2024-08-06T00:32:25.441Z","updated_at":"2026-11-02T14:33:35.488991Z"}],"euvd":[{"id":"EUVD-2016-5444","description":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.","status":"published","published":"2017-04-14T18:00:00Z","modified":"2024-08-06T00:32:25Z","updated_at":"2026-11-03T02:22:46.329763Z"}],"ghsa":[{"id":"GHSA-q3jw-m6vv-gg29","title":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses...","description":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.","status":"published","published":"2022-05-13T01:17:42Z","modified":"2023-02-10T05:06:07Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T14:54:00.716708Z"}],"nvd":[{"id":"CVE-2016-4455","description":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.","status":"published","published":"2017-04-14T18:59:00.297Z","modified":"2026-06-17T00:47:35.51Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:37.619685Z"}],"osv":[{"id":"CVE-2016-4455","description":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.","status":"published","published":"2017-04-14T18:59:00.297Z","modified":"2026-10-20T10:47:31.413696917Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"RHSA-2016:2592","title":"Red Hat Security Advisory: subscription-manager security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:23:19Z","modified":"2026-06-26T12:21:52.61769576Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2017:0698","title":"Red Hat Security Advisory: subscription-manager security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:23:25Z","modified":"2026-06-26T12:22:00.323962287Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:04.262457Z"}]}}