CVE-2023-1832 (published 2023-10-04T13:05:37.522Z)
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant.
Affected products: Vendor: n/a
Product: candlepin-4.3.7
Versions: 3