CVE-2016-3696

Description

References

• access.redhat.com/errata/RHSA-2018:0336
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• docs.pulpproject.org/user-guide/release-notes/2.8.x.html · Permissions Required
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YM2LCC7QBRCK4LTN5EZT5OHTVAR3MYTY
• pulp.plan.io/issues/1854 · Issue Tracking

pulp 的其他漏洞

• CVE-2018-10917中危 6.5pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to l…
• CVE-2018-1090高危 7.5In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with rea…
• CVE-2015-5263高危 8.1pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon…
• CVE-2016-3704高危 7.5Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.
• CVE-2016-3095中危 5.5server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key.