Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4j55-qh92-5qjq

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets.

In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets.

EPSS

Процентиль: 50%
0.00274
Низкий

7.5 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.5
redhat
почти 8 лет назад

In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets.

CVSS3: 5.5
nvd
больше 7 лет назад

In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets.

EPSS

Процентиль: 50%
0.00274
Низкий

7.5 High

CVSS3

Дефекты

CWE-200