Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5
CVE-2016-3112
- EPSS 0.42%
- Published 08.06.2017 18:29:00
- Last modified 20.04.2025 01:37:25
client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer private keys and escalate privileges by reading /etc...
5.3
CVE-2016-3106
- EPSS 0.25%
- Published 13.04.2017 14:59:01
- Last modified 20.04.2025 01:37:25
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.
7.5
CVE-2013-7450
- EPSS 0.32%
- Published 03.04.2017 15:59:00
- Last modified 20.04.2025 01:37:25
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.