CVE-2016-3107

NONE EPSS 10.1%

Published Jun 8, 20179y ago · Modified Jun 17, 20262w ago

Published Jun 8, 2017 9y ago

Last Modified Jun 17, 2026 2w ago

Description

The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world-readable file in the "/etc/pki/pulp/nodes/" directory, which allows local users to gain access to sensitive data.

Threat Intelligence

EPSS Exploit Probability

10.1% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-284

Affected Products 1

Vendor	Product	Version	Range
pulpproject	pulp	*	≤2.8.2-1

References 5

openwall.com http://www.openwall.com/lists/oss-security/2016/05/20/1

Mailing ListThird Party Advisory
access.redhat.com https://access.redhat.com/errata/RHBA-2016:1501
bugzilla.redhat.com https://bugzilla.redhat.com/attachment.cgi?id=1146471

Issue Tracking
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1325930

Issue Tracking
pulp.plan.io https://pulp.plan.io/issues/1833

PatchVendor Advisory

Remediation

pulp.plan.io https://pulp.plan.io/issues/1833

PatchVendor Advisory