Pulp Ansible

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-3644 PyPI MEDIUM POC PATCH This Month

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Pulp Ansible Ansible Automation Platform Satellite Update Infrastructure

NVD GitHub

CVSS 3.1

5.5

EPSS

0.3%

CVE-2022-3644 PyPI

EPSS 0% CVSS 5.5

MEDIUM POC PATCH This Month

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Pulp Ansible Ansible Automation Platform +2

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy