CVE-2015-5263

Mô tả

Tham khảo

• cve.killedkenny.io/cve/CVE-2015-5263 · Third Party Advisory
• openwall.com/lists/oss-security/2015/09/24/4 · Mailing List
• pulp/pulp · Third Party Advisory
• pulp/pulp commit b542d74 · Patch

Lỗ hổng khác của pulp

• CVE-2018-10917TRUNG BÌNH 6.5pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to l…
• CVE-2018-1090CAO 7.5In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with rea…
• CVE-2016-3704CAO 7.5Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.
• CVE-2016-3696TRUNG BÌNH 5.5The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
• CVE-2016-3095TRUNG BÌNH 5.5server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key.