{"schemaVersion":3,"id":"CVE-2016-4455","aliases":["RHSA-2016:2592","RHSA-2017:0698"],"status":"published","duplicateOf":null,"title":null,"description":"The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.","dates":{"published":"2017-04-14T18:00:00.000Z","modified":"2024-08-06T00:32:25.441Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":3.3,"severity":"low","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.3,"severity":"low","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.1,"severity":"low","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":3.3,"severity":"low","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":4.6,"impact":2.3,"computed":true}]},"epss":{"probability":0.00425,"percentile":0.3544,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00425},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00425,"percentile":0.3544}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00425,"percentile":0.3544}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-264","name":"Permissions, Privileges, and Access Controls","description":"Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.","type":"category","status":"Obsolete","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/264.html"}],"affected":[{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_hpc_node","name":"enterprise linux hpc node","label":"enterprise_linux_hpc_node","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_hpc_node"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"subscription-manager","name":"subscription-manager","label":"subscription-manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.17.6-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.17.6-1","eol":null,"hubHref":"/vendor/redhat/subscription-manager"},{"vendor":"redhat","product":"python-rhsm","name":"python-rhsm","label":"python-rhsm","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-rhsm","purlType":"rpm","versions":[{"text":"< 0:1.18.6-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.9-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.6-1.el6 | < 0:1.17.9-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-rhsm-certificates","name":"python-rhsm-certificates","label":"python-rhsm-certificates","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-rhsm-certificates","purlType":"rpm","versions":[{"text":"< 0:1.18.6-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.9-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.6-1.el6 | < 0:1.17.9-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-rhsm-debuginfo","name":"python-rhsm-debuginfo","label":"python-rhsm-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-rhsm-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.18.6-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.9-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.6-1.el6 | < 0:1.17.9-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager","name":"subscription-manager","label":"subscription-manager","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager","purlType":"rpm","versions":[{"text":"< 0:1.18.10-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.15-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.10-1.el6 | < 0:1.17.15-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-debuginfo","name":"subscription-manager-debuginfo","label":"subscription-manager-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.18.10-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.15-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.10-1.el6 | < 0:1.17.15-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-firstboot","name":"subscription-manager-firstboot","label":"subscription-manager-firstboot","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-firstboot","purlType":"rpm","versions":[{"text":"< 0:1.18.10-1.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.10-1.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-gui","name":"subscription-manager-gui","label":"subscription-manager-gui","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-gui","purlType":"rpm","versions":[{"text":"< 0:1.18.10-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.15-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.10-1.el6 | < 0:1.17.15-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-initial-setup-addon","name":"subscription-manager-initial-setup-addon","label":"subscription-manager-initial-setup-addon","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-initial-setup-addon","purlType":"rpm","versions":[{"text":"< 0:1.17.15-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.17.15-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-migration","name":"subscription-manager-migration","label":"subscription-manager-migration","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-migration","purlType":"rpm","versions":[{"text":"< 0:1.18.10-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.15-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.10-1.el6 | < 0:1.17.15-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-migration-data","name":"subscription-manager-migration-data","label":"subscription-manager-migration-data","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-migration-data","purlType":"rpm","versions":[{"text":"< 0:2.0.34-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:2.0.31-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.34-1.el6 | < 0:2.0.31-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-plugin-container","name":"subscription-manager-plugin-container","label":"subscription-manager-plugin-container","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-plugin-container","purlType":"rpm","versions":[{"text":"< 0:1.18.10-1.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.17.15-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.18.10-1.el6 | < 0:1.17.15-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"subscription-manager-plugin-ostree","name":"subscription-manager-plugin-ostree","label":"subscription-manager-plugin-ostree","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/subscription-manager-plugin-ostree","purlType":"rpm","versions":[{"text":"< 0:1.17.15-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.17.15-1.el7","eol":null,"hubHref":null}],"affectedCount":17,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340525","label":"bugzilla.redhat.com/show_bug.cgi?id=1340525","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Third Party Advisory","VDB Entry","REPORT"]},{"url":"http://www.securitytracker.com/id/1038083","label":"www.securitytracker.com/id/1038083","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/26/5","label":"www.openwall.com/lists/oss-security/2016/10/26/5","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93926","label":"www.securityfocus.com/bid/93926","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2592.html","label":"rhn.redhat.com/errata/RHSA-2016-2592.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/candlepin/subscription-manager/commit/9dec31","label":"github.com/candlepin/subscription-manager/commit/9dec31","hostname":"github.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"https://github.com/candlepin/subscription-manager/blob/subscription-manager-1.17.7-1/subscription-manager.spec","label":"github.com/candlepin/…","hostname":"github.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0698.html","label":"rhn.redhat.com/errata/RHSA-2017-0698.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2592","label":"access.redhat.com/errata/RHSA-2016:2592","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","label":"access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874735","label":"bugzilla.redhat.com/show_bug.cgi?id=874735","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104332","label":"bugzilla.redhat.com/show_bug.cgi?id=1104332","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1251516","label":"bugzilla.redhat.com/show_bug.cgi?id=1251516","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257179","label":"bugzilla.redhat.com/show_bug.cgi?id=1257179","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262919","label":"bugzilla.redhat.com/show_bug.cgi?id=1262919","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264108","label":"bugzilla.redhat.com/show_bug.cgi?id=1264108","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264470","label":"bugzilla.redhat.com/show_bug.cgi?id=1264470","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264964","label":"bugzilla.redhat.com/show_bug.cgi?id=1264964","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268043","label":"bugzilla.redhat.com/show_bug.cgi?id=1268043","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268094","label":"bugzilla.redhat.com/show_bug.cgi?id=1268094","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268307","label":"bugzilla.redhat.com/show_bug.cgi?id=1268307","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306004","label":"bugzilla.redhat.com/show_bug.cgi?id=1306004","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315901","label":"bugzilla.redhat.com/show_bug.cgi?id=1315901","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325083","label":"bugzilla.redhat.com/show_bug.cgi?id=1325083","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328553","label":"bugzilla.redhat.com/show_bug.cgi?id=1328553","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328555","label":"bugzilla.redhat.com/show_bug.cgi?id=1328555","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328559","label":"bugzilla.redhat.com/show_bug.cgi?id=1328559","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328579","label":"bugzilla.redhat.com/show_bug.cgi?id=1328579","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328609","label":"bugzilla.redhat.com/show_bug.cgi?id=1328609","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328628","label":"bugzilla.redhat.com/show_bug.cgi?id=1328628","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328729","label":"bugzilla.redhat.com/show_bug.cgi?id=1328729","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329397","label":"bugzilla.redhat.com/show_bug.cgi?id=1329397","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330021","label":"bugzilla.redhat.com/show_bug.cgi?id=1330021","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330054","label":"bugzilla.redhat.com/show_bug.cgi?id=1330054","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330515","label":"bugzilla.redhat.com/show_bug.cgi?id=1330515","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333545","label":"bugzilla.redhat.com/show_bug.cgi?id=1333545","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333904","label":"bugzilla.redhat.com/show_bug.cgi?id=1333904","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333906","label":"bugzilla.redhat.com/show_bug.cgi?id=1333906","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334916","label":"bugzilla.redhat.com/show_bug.cgi?id=1334916","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335371","label":"bugzilla.redhat.com/show_bug.cgi?id=1335371","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335537","label":"bugzilla.redhat.com/show_bug.cgi?id=1335537","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336428","label":"bugzilla.redhat.com/show_bug.cgi?id=1336428","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336880","label":"bugzilla.redhat.com/show_bug.cgi?id=1336880","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336883","label":"bugzilla.redhat.com/show_bug.cgi?id=1336883","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340135","label":"bugzilla.redhat.com/show_bug.cgi?id=1340135","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1345962","label":"bugzilla.redhat.com/show_bug.cgi?id=1345962","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346417","label":"bugzilla.redhat.com/show_bug.cgi?id=1346417","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349533","label":"bugzilla.redhat.com/show_bug.cgi?id=1349533","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349538","label":"bugzilla.redhat.com/show_bug.cgi?id=1349538","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349584","label":"bugzilla.redhat.com/show_bug.cgi?id=1349584","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349592","label":"bugzilla.redhat.com/show_bug.cgi?id=1349592","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351370","label":"bugzilla.redhat.com/show_bug.cgi?id=1351370","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353662","label":"bugzilla.redhat.com/show_bug.cgi?id=1353662","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354653","label":"bugzilla.redhat.com/show_bug.cgi?id=1354653","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354655","label":"bugzilla.redhat.com/show_bug.cgi?id=1354655","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360909","label":"bugzilla.redhat.com/show_bug.cgi?id=1360909","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365280","label":"bugzilla.redhat.com/show_bug.cgi?id=1365280","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366055","label":"bugzilla.redhat.com/show_bug.cgi?id=1366055","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366301","label":"bugzilla.redhat.com/show_bug.cgi?id=1366301","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366747","label":"bugzilla.redhat.com/show_bug.cgi?id=1366747","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366799","label":"bugzilla.redhat.com/show_bug.cgi?id=1366799","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367243","label":"bugzilla.redhat.com/show_bug.cgi?id=1367243","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367657","label":"bugzilla.redhat.com/show_bug.cgi?id=1367657","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369522","label":"bugzilla.redhat.com/show_bug.cgi?id=1369522","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372673","label":"bugzilla.redhat.com/show_bug.cgi?id=1372673","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2592.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2592.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4455","label":"access.redhat.com/security/cve/CVE-2016-4455","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4455","label":"www.cve.org/CVERecord?id=CVE-2016-4455","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4455","label":"nvd.nist.gov/vuln/detail/CVE-2016-4455","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0698","label":"access.redhat.com/errata/RHSA-2017:0698","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html","label":"access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html","label":"access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1176219","label":"bugzilla.redhat.com/show_bug.cgi?id=1176219","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185914","label":"bugzilla.redhat.com/show_bug.cgi?id=1185914","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232472","label":"bugzilla.redhat.com/show_bug.cgi?id=1232472","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283749","label":"bugzilla.redhat.com/show_bug.cgi?id=1283749","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286842","label":"bugzilla.redhat.com/show_bug.cgi?id=1286842","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287925","label":"bugzilla.redhat.com/show_bug.cgi?id=1287925","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298140","label":"bugzilla.redhat.com/show_bug.cgi?id=1298140","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301215","label":"bugzilla.redhat.com/show_bug.cgi?id=1301215","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315591","label":"bugzilla.redhat.com/show_bug.cgi?id=1315591","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317613","label":"bugzilla.redhat.com/show_bug.cgi?id=1317613","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320507","label":"bugzilla.redhat.com/show_bug.cgi?id=1320507","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320597","label":"bugzilla.redhat.com/show_bug.cgi?id=1320597","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320607","label":"bugzilla.redhat.com/show_bug.cgi?id=1320607","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320647","label":"bugzilla.redhat.com/show_bug.cgi?id=1320647","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321831","label":"bugzilla.redhat.com/show_bug.cgi?id=1321831","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323276","label":"bugzilla.redhat.com/show_bug.cgi?id=1323276","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327179","label":"bugzilla.redhat.com/show_bug.cgi?id=1327179","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337817","label":"bugzilla.redhat.com/show_bug.cgi?id=1337817","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351009","label":"bugzilla.redhat.com/show_bug.cgi?id=1351009","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367128","label":"bugzilla.redhat.com/show_bug.cgi?id=1367128","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382355","label":"bugzilla.redhat.com/show_bug.cgi?id=1382355","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383475","label":"bugzilla.redhat.com/show_bug.cgi?id=1383475","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385382","label":"bugzilla.redhat.com/show_bug.cgi?id=1385382","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385446","label":"bugzilla.redhat.com/show_bug.cgi?id=1385446","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389559","label":"bugzilla.redhat.com/show_bug.cgi?id=1389559","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390258","label":"bugzilla.redhat.com/show_bug.cgi?id=1390258","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390341","label":"bugzilla.redhat.com/show_bug.cgi?id=1390341","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390688","label":"bugzilla.redhat.com/show_bug.cgi?id=1390688","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390712","label":"bugzilla.redhat.com/show_bug.cgi?id=1390712","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391681","label":"bugzilla.redhat.com/show_bug.cgi?id=1391681","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393573","label":"bugzilla.redhat.com/show_bug.cgi?id=1393573","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394351","label":"bugzilla.redhat.com/show_bug.cgi?id=1394351","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394776","label":"bugzilla.redhat.com/show_bug.cgi?id=1394776","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395659","label":"bugzilla.redhat.com/show_bug.cgi?id=1395659","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395662","label":"bugzilla.redhat.com/show_bug.cgi?id=1395662","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395684","label":"bugzilla.redhat.com/show_bug.cgi?id=1395684","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395794","label":"bugzilla.redhat.com/show_bug.cgi?id=1395794","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396405","label":"bugzilla.redhat.com/show_bug.cgi?id=1396405","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397201","label":"bugzilla.redhat.com/show_bug.cgi?id=1397201","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400719","label":"bugzilla.redhat.com/show_bug.cgi?id=1400719","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401078","label":"bugzilla.redhat.com/show_bug.cgi?id=1401078","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402009","label":"bugzilla.redhat.com/show_bug.cgi?id=1402009","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403387","label":"bugzilla.redhat.com/show_bug.cgi?id=1403387","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404930","label":"bugzilla.redhat.com/show_bug.cgi?id=1404930","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417731","label":"bugzilla.redhat.com/show_bug.cgi?id=1417731","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417736","label":"bugzilla.redhat.com/show_bug.cgi?id=1417736","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417740","label":"bugzilla.redhat.com/show_bug.cgi?id=1417740","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417746","label":"bugzilla.redhat.com/show_bug.cgi?id=1417746","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0698.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0698.json","hostname":"security.access.redhat.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-04-14T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T00:32:25.441Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":13,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T20:08:20.494Z","stale":false,"partial":false}}