The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-fast_gettextUpgrade rubygem-jwtUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-brandingUpgrade rubygem-clampUpgrade rubygem-version_gemUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade foreman-cliUpgrade satelliteUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-foreman_maintainUpgrade rubygem-gssapiUpgrade rubygem-highlineUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-amazing_printUpgrade rubygem-oauthUpgrade rubygem-hashieUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-loggingUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-apipie-bindingsUpgrade rubygem-unfUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-snaky_hashUpgrade rubygem-ffi-debugsourceUpgrade satellite-cliUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-types-dataUpgrade satellite-cloneUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-typesUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_adminUpgrade python39-pulp_manifestUpgrade rubygem-unicode-debuginfoUpgrade rubygem-localeUpgrade rubygem-unicode | Nov 13, 2023 | Oct 25, 2022 |
| Redhat_linux | — | Upgrade rubygem-fast_gettextUpgrade rubygem-clampUpgrade rubygem-unicodeUpgrade rubygem-gssapiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cliUpgrade satellite-brandingUpgrade rubygem-apipie-bindingsUpgrade rubygem-ffi-debugsourceUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-jwtUpgrade rubygem-http-acceptUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cloneUpgrade python39-pulp_manifestUpgrade rubygem-snaky_hashUpgrade rubygem-localeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-unicode-debuginfoUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-unfUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-ffiUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-display_widthUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade satelliteUpgrade satellite-cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-little-pluggerUpgrade rubygem-powerbar | Nov 13, 2023 | Oct 25, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfo | Mar 5, 2024 | Oct 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub