CVE-2013-6439: Red Hat Subscription Asset Manager

High severity, CVSS 9.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.

Affected products

• Red Hat Subscription Asset Manager: version 1.0.0 only; version 1.1.0 only; version 1.2.0 only; version 1.2.1 only; version 1.3.0 only

Published 2013-12-23. Last modified 2026-06-17.