CVE-2016-3696 The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
MediumCVSS 5.5
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject fedora | = 24 | No fix listed |
| pulpproject pulp | <= 2.8.4 | No fix listed |
References
- RHSA-2018:0336 vendor-advisory
- bugzilla.redhat.com issue-tracking
- docs.pulpproject.org permissions-required
- FEDORA-2016-4373f7d32a vendor-advisory
- pulp.plan.io issue-tracking vendor-advisory