CVE-2021-4142: Candlepinproject Candlepin

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.

Affected products

• Candlepinproject Candlepin: from 3.1.0, up to and including 3.1.28-2; from 3.2.0, up to and including 3.2.21-1; from 4.1.0, up to and including 4.1.8-1

Published 2022-08-24. Last modified 2026-06-17.