PT-2017-8336 · Pulp · Pulp

CVE-2016-3106

Published

2017-04-13

Updated

2017-04-26

CVSS v3.1

5.3

Medium

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pulp versions prior to 2.8.3

Description The issue arises from the insecure creation of a temporary directory during CA key generation.

Recommendations For versions prior to 2.8.3, update to version 2.8.3 or later to resolve the issue.

Fix

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2016-3106

Pulp