Pulpproject vulnerabilities

Products

• Pulp 13

Newest

• pulpproject pulp, red hat ansible automation platform 2, satellite 6 +1 more +3 more Pulpcore: rbac permissions incorrectly assigned in tasks that create objects CVE-2024-7143 6.7 MediumAugust 7, 2024
• pulpproject pulp ansible, redhat ansible automation platform, satellite +1 more +3 more Plaintext storage of tokens in pulp_ansible CVE-2022-3644 Fix available 5.5 MediumOctober 25, 2022
• [unknown] pulp Withdrawn Advisory: Pulp Improper Path Parsing CVE-2018-10917 Fix available 6.8 MediumAugust 15, 2018
• [unknown] pulp, fedoraproject fedora, redhat satellite +2 more In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and... CVE-2018-1090 5.5 MediumJune 18, 2018
• pulpproject qpid The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows... CVE-2015-5164 7.2 HighOctober 18, 2017
• pulpproject pulp pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures... CVE-2015-5263 8.1 HighSeptember 25, 2017
• pulpproject pulp, fedoraproject fedora +1 more Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords. CVE-2016-3704 7.5 HighJune 13, 2017
• pulpproject pulp, fedoraproject fedora +1 more The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key. CVE-2016-3696 5.5 MediumJune 13, 2017
• pulpproject pulp, fedoraproject fedora +1 more server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated... CVE-2016-3095 5.5 MediumJune 8, 2017
• pulpproject pulp client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer... CVE-2016-3112 7.5 HighJune 8, 2017
• pulpproject pulp pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate... CVE-2016-3111 5.5 MediumJune 8, 2017
• pulpproject pulp The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or... CVE-2016-3108 7.1 HighJune 8, 2017
• pulpproject pulp The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world... CVE-2016-3107 5.5 MediumJune 8, 2017
• pulpproject pulp Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner. CVE-2016-3106 5.3 MediumApril 13, 2017
• pulpproject pulp Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all... CVE-2013-7450 7.5 HighApril 3, 2017