Overview
- Description
- The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.5
- Impact score
- 3.6
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:pulpproject:pulp_ansible:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DCED721-A508-4E93-ACF5-AB2B6C4BF2C6"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B4BE2D6-43C3-4065-A213-5DB1325DC78F"
},
{
"criteria": "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "848C92A9-0677-442B-8D52-A448F2019903"
},
{
"criteria": "cpe:2.3:a:redhat:update_infrastructure:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "812C62CE-7B5A-491C-A02E-0E848D1FD780"
}
],
"operator": "OR"
}
]
}
]