CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3106
https://notcve.org/view.php?id=CVE-2016-3106
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner. Pulp en versiones anteriores a 2.8.3 crea un directorio temporal durante la generación de claves CA de forma insegura. • http://www.openwall.com/lists/oss-security/2016/04/18/11 http://www.openwall.com/lists/oss-security/2016/05/20/1 https://bugzilla.redhat.com/show_bug.cgi?id=1324926 https://pulp.plan.io/issues/1827 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2013-7450
https://notcve.org/view.php?id=CVE-2013-7450
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations. Pulp en versiones anteriores a 2.3.0 utiliza la misma clave y certificado de autoridad de certificación para todas las instalaciones. • http://www.openwall.com/lists/oss-security/2016/04/18/11 http://www.openwall.com/lists/oss-security/2016/04/18/5 http://www.openwall.com/lists/oss-security/2016/05/20/1 https://bugzilla.redhat.com/show_bug.cgi?id=1003326 https://bugzilla.redhat.com/show_bug.cgi?id=1328345 https://github.com/pulp/pulp/pull/627 • CWE-295: Improper Certificate Validation •