CVE-2016-3112 client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer pr...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer private keys and escalate privileges by reading /etc/pki/pulp/consumer/consumer-cert, and authenticating as a consumer user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pulpproject pulp | <= 2.8.2-1 | No fix listed |
References
- [oss-security] 20160519 Pulp 2.8.3 Released to address multiple CVEs mailing-list third-party-advisory
- RHBA-2016:1501 vendor-advisory
- bugzilla.redhat.com issue-tracking
- bugzilla.redhat.com issue-tracking
- pulp.plan.io patch vendor-advisory