CVE-2016-3106

Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.

Score

CVSS 3.0 5.3 Medium

Status

Modified - secalert@redhat.com

Published

2017-04-13

Last modified

2024-08-05

Weaknesses

CWE-362

Affected products

• Pulp (Pulpproject)

References

• http://www.openwall.com/lists/oss-security/2016/04/18/11
• http://www.openwall.com/lists/oss-security/2016/05/20/1
• https://bugzilla.redhat.com/show_bug.cgi?id=1324926
• https://pulp.plan.io/issues/1827