Browse CVEs

HIGH 8.3 CVE-2024-7143 A flaw was found in the Pulp package. When a role-based access control (RBAC) object in Pulp is set to assign permissions on its creation, it uses th… Pulp Mitigation only Fix from $1,9502024-08-07 MEDIUM 6.5 CVE-2018-10917 pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations … Pulp after 2.16.0 Fix from $1,6002018-08-15 HIGH 7.2 CVE-2015-5164 The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access o… Qpid Mitigation only Fix from $1,9502017-10-18 HIGH 8.1 CVE-2015-5263 pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registra… Pulp Patch available Fix from $1,9502017-09-25 HIGH 7.5 CVE-2016-3112 client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows r… Pulp after 2.8.2-1 Fix from $1,9502017-06-08 HIGH 7.1 CVE-2016-3108 The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack. Pulp after 2.8.2-1 Fix from $1,9502017-06-08 MEDIUM 5.5 CVE-2016-3107 The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world-readable file in the "/etc/pki/pulp/nodes/" directory, w… Pulp after 2.8.2-1 Fix from $1,6002017-06-08 MEDIUM 5.5 CVE-2016-3111 pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp consumers… Pulp after 2.8.2-1 Fix from $1,6002017-06-08 MEDIUM 5.3 CVE-2016-3106 Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner. Pulp Patch available Fix from $1,6002017-04-13 HIGH 7.5 CVE-2013-7450 Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations. Pulp after 2.2.1-1 Fix from $1,9502017-04-03