Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world-readable file in the "/etc/pki/pulp/nodes/" directory, which allows local users to gain access to sensitive data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pulp 访问控制错误漏洞
Vulnerability Description
pulp_ansible是Pulp开源的一个支持托管 Role 和 Collection Ansible 内容的 Pulp 插件。 Pulp 2.8.3之前版本存在访问控制错误漏洞，该漏洞源于程序将私钥储存在/etc/pki/pulp/nodes/路径下的可读文件中。本地攻击者利用该漏洞获取敏感数据的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A