Name: CVE-2022-3644: Plaintext Storage of a Password
Creator: Rapid7
Published: 2022-10-25T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-3644, CWE-256, CWE-522, CVSS 5.5, EPSS 0.00039

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade rubygem-http-acceptUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-multi_jsonUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-localeUpgrade rubygem-mime-typesUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffiUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-powerbarUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-http-cookieUpgrade rubygem-unfUpgrade rubygem-loggingUpgrade rubygem-little-pluggerUpgrade rubygem-unf_extUpgrade rubygem-unicode-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-clampUpgrade satellite-brandingUpgrade satelliteUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-jwtUpgrade rubygem-gssapiUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cliUpgrade rubygem-highlineUpgrade rubygem-hashieUpgrade rubygem-amazing_printUpgrade rubygem-oauthUpgrade satellite-maintainUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-ffi-debuginfoUpgrade foreman-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-fast_gettext	Nov 13, 2023	Oct 25, 2022
Redhat_linux	—	Upgrade rubygem-snaky_hashUpgrade rubygem-apipie-bindingsUpgrade satellite-brandingUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-gssapiUpgrade satellite-cloneUpgrade rubygem-http-acceptUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-oauthUpgrade rubygem-amazing_printUpgrade rubygem-unf_extUpgrade rubygem-localeUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-fast_gettextUpgrade rubygem-version_gemUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-multi_jsonUpgrade rubygem-rest-clientUpgrade rubygem-ffi-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-clampUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foremanUpgrade satellite-cliUpgrade rubygem-powerbarUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade satellite-maintainUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade rubygem-highlineUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unfUpgrade satellite	Nov 13, 2023	Oct 25, 2022
Rocky_linux	—	Upgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsource	Mar 5, 2024	Oct 25, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence