Most recent entries from all

cnvd-2016-03573

2026-10-03T08:10:03.421733+00:00

cnvd-2016-03573

EUVD-2026-83422

2026-10-03T08:10:03.421780+00:00

EUVD-2026-83422

fkie_cve-2016-3112

2026-10-03T08:10:03.421796+00:00

client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer private keys and escalate privileges by reading /etc/pki/pulp/consumer/consumer-cert, and authenticating as a consumer user.

GHSA-3j4c-jhfg-648f

2026-10-03T08:10:03.421827+00:00

gsd-2016-3112

2026-10-03T08:10:03.421844+00:00

gsd-2016-3112

RHBA-2016:1501 — Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server

2026-10-03T08:10:03.421855+00:00

Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter