PT-2017-8411

CVE-2016-3696

Published

2017-06-13

Updated

2023-02-13

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pulp versions prior to 2.8.5

Description The issue allows local users to obtain the CA key due to a problem in the pulp-qpid-ssl-cfg script.

Recommendations For versions prior to 2.8.5, update to version 2.8.5 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

RHSA-2018:0336

Found an issue in the description? Have something to add? Feel free to write us 👾