PU
Vendor
Pulpproject
15
CVEs
0
On KEV
0
New 30D
Products
PU8.3
Pulp
Pulpproject
13 CVEs0 on KEV0 new
PA5.5
Pulp Ansible
Pulpproject
1 CVEs0 on KEV0 new
QP7.2
Qpid
Pulpproject
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-7143 | PU Pulp Pulpproject | 8.3 | Aug 7 | A flaw was found in the Pulp package |
| CVE-2022-3644 | PA Pulp Ansible Pulpproject | 5.5 | Oct 25 | The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it… |
| CVE-2018-10917 | PU Pulp Pulpproject | 6.5 | Aug 15 | pulp 2.16.x and possibly older is vulnerable to an improper path parsing |
| CVE-2018-1090 | PU Pulp Pulpproject | 7.5 | Jun 18 | In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer |
| CVE-2015-5164 | QP Qpid Pulpproject | 7.2 | Oct 18 | The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to… |
| CVE-2015-5263 | PU Pulp Pulpproject | 8.1 | Sep 25 | pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registration |
| CVE-2016-3704 | PU Pulp Pulpproject | 7.5 | Jun 13 | Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords |
| CVE-2016-3696 | PU Pulp Pulpproject | 5.5 | Jun 13 | The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key |
| CVE-2016-3095 | PU Pulp Pulpproject | 5.5 | Jun 8 | server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key |
| CVE-2016-3112 | PU Pulp Pulpproject | 7.5 | Jun 8 | client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to… |
| CVE-2016-3111 | PU Pulp Pulpproject | 5.5 | Jun 8 | pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp consumers in a directory that is… |
| CVE-2016-3108 | PU Pulp Pulpproject | 7.1 | Jun 8 | The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack |
| CVE-2016-3107 | PU Pulp Pulpproject | 5.5 | Jun 8 | The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world-readable file in the "/etc/pki/pulp/nodes/" directory, which allows local users to… |
| CVE-2016-3106 | PU Pulp Pulpproject | 5.3 | Apr 13 | Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner |
| CVE-2013-7450 | PU Pulp Pulpproject | 7.5 | Apr 3 | Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations |