RHSA-2013%3A0686 — Vulnetix

RHSA-2013%3A0686 PUBLISHED CVSS 5.400000095367432 MEDIUM

Red Hat Subscription Asset Manager 1.2.1, which fixes several security issues, multiple bugs, and adds various enhancements, is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Risk Scores

CVSS 3.1

5.400000095367432

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
	candlepin
	katello
	rubygem
	Red Hat Subscription Asset Manager for RHEL 6 Server

Exploit Intelligence

Inspect all of your Heroku apps for vulnerable versions of the JSON gem (github-poc)
Inspect all of your Heroku apps for vulnerable versions of the JSON gem (github-poc)
https://bugzilla.redhat.com/show_bug.cgi?id=909029 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=906901 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=907820 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=908613 (circl)
https://access.redhat.com/errata/RHSA-2013:0686 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=909071 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=909528 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=918778 (circl)

…and 35 more exploits

Timeline

Mar 26, 2013 CVE Published
Apr 5, 2026 Distribution Patch
Apr 5, 2026 Distribution Patch
Apr 5, 2026 Security Advisory
Apr 28, 2026 Security Advisory
Apr 28, 2026 Security Advisory
Apr 28, 2026 Security Advisory
Apr 28, 2026 Security Advisory
Apr 28, 2026 Security Advisory
Apr 28, 2026 Security Advisory
Apr 28, 2026 Security Advisory
Jun 27, 2026 CVE Updated

References

Open in Interactive Console →