The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffiUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-apipie-bindingsUpgrade satellite-cliUpgrade rubygem-snaky_hashUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-display_widthUpgrade rubygem-http-cookieUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade satellite-cloneUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauth-ttyUpgrade rubygem-domain_nameUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-http-acceptUpgrade rubygem-unf_extUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-amazing_printUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-clampUpgrade satelliteUpgrade rubygem-highlineUpgrade rubygem-foreman_maintainUpgrade rubygem-gssapiUpgrade rubygem-oauthUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade satellite-brandingUpgrade rubygem-hammer_cliUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-jwtUpgrade satellite-maintain | Nov 13, 2023 | Oct 25, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debugsourceUpgrade rubygem-version_gemUpgrade rubygem-snaky_hashUpgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-fast_gettextUpgrade rubygem-unicodeUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-loggingUpgrade python39-pulp_manifestUpgrade rubygem-http-acceptUpgrade rubygem-jwtUpgrade rubygem-http-cookieUpgrade satellite-brandingUpgrade rubygem-oauthUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cliUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debugsourceUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-highlineUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-oauth-ttyUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foremanUpgrade foreman-cliUpgrade satellite-cliUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-netrcUpgrade satellite-maintainUpgrade rubygem-unfUpgrade rubygem-unf_ext-debuginfoUpgrade satelliteUpgrade rubygem-mime-typesUpgrade rubygem-little-pluggerUpgrade rubygem-ffi | Nov 13, 2023 | Oct 25, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfo | Mar 5, 2024 | Oct 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub