[{"CVE":"CVE-2016-4455","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2017:0698","RHSA-2016:2592"],"bugzilla":"1340525","bugzilla_description":"CVE-2016-4455 subscription-manager: sensitive world readable files in /var/lib/rhsm/","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["subscription-manager-0:1.18.10-1.el6","subscription-manager-0:1.17.15-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4455.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2012-6137","severity":"moderate","public_date":"2013-05-06T00:00:00Z","advisories":["RHSA-2013:0788"],"bugzilla":"885130","bugzilla_description":"CVE-2012-6137 subscription-manager: rhn-migrate-classic-to-rhsm missing SSL certificate verification","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["subscription-manager-0:1.1.23.1-1.el6_4","subscription-manager-0:1.0.24.1-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6137.json"},{"CVE":"CVE-2017-2663","severity":"moderate","public_date":null,"advisories":[],"bugzilla":"1434100","bugzilla_description":"CVE-2017-2663 subscription-manager: unsafe dbus interface","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.2"}]