Vulnerabilities > Pulpproject > Pulp > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-07 | CVE-2024-7143 | Insecure Inherited Permissions vulnerability in Pulpproject Pulp A flaw was found in the Pulp package. | 8.3 |
| 2017-06-13 | CVE-2016-3704 | Credentials Management vulnerability in multiple products Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords. | 7.5 |
| 2017-06-08 | CVE-2016-3112 | Improper Access Control vulnerability in Pulpproject Pulp client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer private keys and escalate privileges by reading /etc/pki/pulp/consumer/consumer-cert, and authenticating as a consumer user. | 7.5 |
| 2017-06-08 | CVE-2016-3108 | Link Following vulnerability in Pulpproject Pulp The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack. | 7.1 |