https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:33:07 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:4706 <p><strong>Affected:</strong> AlmaLinux:8: dnf-plugin-subscription-manager, AlmaLinux:8: python3-cloud-what, AlmaLinux:8: python3-subscription-manager-rhsm, AlmaLinux:8: python3-syspurpose, AlmaLinux:8: subscription-manager, AlmaLinux:8: subscription-manager-migration, AlmaLinux:8: subscription-manager-plugin-ostree, AlmaLinux:8: subscription-manager-rhsm-certificates</p> <p>The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform.</p> <p>Security Fix(es):</p> <p>* subscription-manager: inadequate authorization of com.AlmaLinux.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: dnf-plugin-subscription-manager, AlmaLinux:8: python3-cloud-what, AlmaLinux:8: python3-subscription-manager-rhsm, AlmaLinux:8: python3-syspurpose, AlmaLinux:8: subscription-manager, AlmaLinux:8: subscription-manager-migration, AlmaLinux:8: subscription-manager-plugin-ostree, AlmaLinux:8: subscription-manager-rhsm-certificates</p> <p>The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform.</p> <p>Security Fix(es):</p> <p>* subscription-manager: inadequate authorization of com.AlmaLinux.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:4706 https://cve.radiocsirt.org/vuln/bdu:2023-04878 bdu:2023-04878 https://cve.radiocsirt.org/vuln/bdu:2023-04878 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0950 certfr-2023-avi-0950 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0950 https://cve.radiocsirt.org/vuln/euvd-2026-261415 EUVD-2026-261415 https://cve.radiocsirt.org/vuln/euvd-2026-261415 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3899 <p>A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.</p> <p>A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3899 https://cve.radiocsirt.org/vuln/ghsa-wp8h-m67c-cxpw <p>A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.</p> <p>A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.</p> https://cve.radiocsirt.org/vuln/ghsa-wp8h-m67c-cxpw https://cve.radiocsirt.org/vuln/gsd-2023-3899 gsd-2023-3899 https://cve.radiocsirt.org/vuln/gsd-2023-3899 https://cve.radiocsirt.org/vuln/rhsa-2023:4701 <p>subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration</p> <p>subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration</p> https://cve.radiocsirt.org/vuln/rhsa-2023:4701 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2118 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2118