ALSA-2023:4706

Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2023:4706.json

Aliases

• CVE-2023-3899 ( ALSA-2023:4708 )

Published

2023-08-22T00:00:00Z

Modified

2023-08-31T13:52:34Z

Details

The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform.

Security Fix(es):

• subscription-manager: inadequate authorization of com.AlmaLinux.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

• https://access.redhat.com/errata/RHSA-2023:4706
• https://access.redhat.com/security/cve/CVE-2023-3899
• https://bugzilla.redhat.com/2225407
• https://errata.almalinux.org/8/ALSA-2023-4706.html