CVE-2016-3111

Published June 8th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

2.1

LOW

Affected

PROJECT

Description

pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp consumers in a directory that is world-readable before later modifying the permissions, which might allow local users to read the generated RSA keys via reading the key files while the installation process is running.

pulp/pulp

⛔️Pulp2 is EOL! ⛔️Pulp 2 platform code, including the server and base admin and consumer clients

GitHub

510