Read the docs

Pulpproject

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Pulpproject records in CISA KEV

No Pulpproject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pulp 13 records LOW Pulp Ansible 1 record MEDIUM Qpid 1 record LOW

Records

1 record in Pulp Ansible · all components

TI-2022-03352 CVE-2022-3644 · GHSA-qv37-mfjf-42h8

Insufficiently protected credentials in pulp_ansible

Priority MEDIUM 58

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00302 Published 2022-10-25 Partial fix · 0.15.0 CWE-256
Open these records in search →