[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fscirN9D1vjdq_1CB2_Sml-KDZhAoWVpryGWLB31_tlo":3,"g5a-ex:pulpproject\u002Fpulp@*":270,"g5a-family:pulpproject\u002Fpulp":272},{"success":4,"data":5},true,{"product":6,"versions":131,"topVulnerabilitiesByEpss":189,"kevVulnerabilities":247,"seoMetadata":248,"meta":267},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":130},"pulpproject","pulp",57,13,0,"2024-08-07",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.1",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.1",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.2",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.3",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"2.15.0",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"2.16.0",{"version":48,"cve_count":49,"kev_count":11,"has_kev":16},"2.16.1",1,{"version":51,"cve_count":49,"kev_count":11,"has_kev":16},"2.16.2",{"version":53,"cve_count":49,"kev_count":11,"has_kev":16},"2.16.4",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"2.17.0",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"2.17.1",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"2.18.0",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"2.19.0",{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},"2.19.1",{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.0",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.1",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.0",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1-1",{"version":73,"cve_count":49,"kev_count":11,"has_kev":16},"2.4.0",{"version":75,"cve_count":49,"kev_count":11,"has_kev":16},"2.4.1",{"version":77,"cve_count":49,"kev_count":11,"has_kev":16},"2.4.2",{"version":79,"cve_count":49,"kev_count":11,"has_kev":16},"2.4.3",{"version":81,"cve_count":49,"kev_count":11,"has_kev":16},"2.4.4",{"version":83,"cve_count":49,"kev_count":11,"has_kev":16},"2.5.0",{"version":85,"cve_count":49,"kev_count":11,"has_kev":16},"2.5.1",{"version":87,"cve_count":49,"kev_count":11,"has_kev":16},"2.5.2",{"version":89,"cve_count":49,"kev_count":11,"has_kev":16},"2.5.3",{"version":91,"cve_count":49,"kev_count":11,"has_kev":16},"2.6.0",{"version":93,"cve_count":49,"kev_count":11,"has_kev":16},"2.6.1",{"version":95,"cve_count":49,"kev_count":11,"has_kev":16},"2.6.2",{"version":97,"cve_count":49,"kev_count":11,"has_kev":16},"2.6.3",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.4",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.5",{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.0",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.0",{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.1",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.2",{"version":111,"cve_count":49,"kev_count":11,"has_kev":16},"2.8.2-1",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.3",{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.4",{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.5",{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.6",{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.7",{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.0",{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.1",{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.2",{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.3","Pulp by Pulpproject is a technology product with 57 tracked versions and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":49,"kev_count":11,"has_kev":16},{"version":51,"cve_count":49,"kev_count":11,"has_kev":16},{"version":53,"cve_count":49,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":49,"kev_count":11,"has_kev":16},{"version":75,"cve_count":49,"kev_count":11,"has_kev":16},{"version":77,"cve_count":49,"kev_count":11,"has_kev":16},{"version":79,"cve_count":49,"kev_count":11,"has_kev":16},{"version":81,"cve_count":49,"kev_count":11,"has_kev":16},{"version":83,"cve_count":49,"kev_count":11,"has_kev":16},{"version":85,"cve_count":49,"kev_count":11,"has_kev":16},{"version":87,"cve_count":49,"kev_count":11,"has_kev":16},{"version":89,"cve_count":49,"kev_count":11,"has_kev":16},{"version":91,"cve_count":49,"kev_count":11,"has_kev":16},{"version":93,"cve_count":49,"kev_count":11,"has_kev":16},{"version":95,"cve_count":49,"kev_count":11,"has_kev":16},{"version":97,"cve_count":49,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":49,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},[190,198,203,208,215,221,226,232,238,243],{"cveId":191,"description":192,"publishedDate":193,"cvssScore":194,"cvssVersion":195,"severity":196,"isKev":16,"epssScore":197},"CVE-2016-3112","client\u002Fconsumer\u002Fcli.py in Pulp before 2.8.3 writes consumer private keys to etc\u002Fpki\u002Fpulp\u002Fconsumer\u002Fconsumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer private keys and escalate privileges by reading \u002Fetc\u002Fpki\u002Fpulp\u002Fconsumer\u002Fconsumer-cert, and authenticating as a consumer user.","2017-06-08",7.5,"v3.0","High",0.02193,{"cveId":199,"description":200,"publishedDate":201,"cvssScore":194,"cvssVersion":195,"severity":196,"isKev":16,"epssScore":202},"CVE-2016-3704","Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.","2017-06-13",0.0198,{"cveId":204,"description":205,"publishedDate":206,"cvssScore":194,"cvssVersion":195,"severity":196,"isKev":16,"epssScore":207},"CVE-2018-1090","In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor\u002Fimporter. An attacker with API access can then view these secrets.","2018-06-18",0.01338,{"cveId":209,"description":210,"publishedDate":211,"cvssScore":212,"cvssVersion":195,"severity":213,"isKev":16,"epssScore":214},"CVE-2018-10917","pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.","2018-08-15",6.5,"Medium",0.01067,{"cveId":216,"description":217,"publishedDate":218,"cvssScore":219,"cvssVersion":195,"severity":213,"isKev":16,"epssScore":220},"CVE-2016-3106","Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.","2017-04-13",5.3,0.00938,{"cveId":222,"description":223,"publishedDate":224,"cvssScore":194,"cvssVersion":195,"severity":196,"isKev":16,"epssScore":225},"CVE-2013-7450","Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.","2017-04-03",0.00867,{"cveId":227,"description":228,"publishedDate":229,"cvssScore":230,"cvssVersion":195,"severity":196,"isKev":16,"epssScore":231},"CVE-2015-5263","pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registration.","2017-09-25",8.1,0.00866,{"cveId":233,"description":234,"publishedDate":12,"cvssScore":235,"cvssVersion":236,"severity":196,"isKev":16,"epssScore":237},"CVE-2024-7143","A flaw was found in the Pulp package. When a role-based access control (RBAC) object in Pulp is set to assign permissions on its creation, it uses the `AutoAddObjPermsMixin` (typically the add_roles_for_object_creator method). This method finds the object creator by checking the current authenticated user. For objects that are created within a task, this current user is set by the first user with any permissions on the task object. This means the oldest user with model\u002Fdomain-level task permissions will always be set as the current user of a task, even if they didn't dispatch the task. Therefore, all objects created in tasks will have their permissions assigned to this oldest user, and the creating user will receive nothing.",8.3,"v3.1",0.0061,{"cveId":239,"description":240,"publishedDate":193,"cvssScore":241,"cvssVersion":195,"severity":213,"isKev":16,"epssScore":242},"CVE-2016-3111","pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp consumers in a directory that is world-readable before later modifying the permissions, which might allow local users to read the generated RSA keys via reading the key files while the installation process is running.",5.5,0.0039,{"cveId":244,"description":245,"publishedDate":201,"cvssScore":241,"cvssVersion":195,"severity":213,"isKev":16,"epssScore":246},"CVE-2016-3696","The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.",0.00352,[],{"title":249,"metaDescription":250,"keywords":251,"structuredData":252},"Pulp by Pulpproject - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Pulp by Pulpproject covering 57 versions with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Pulp vulnerabilities, Pulp security, Pulp CVE, Pulpproject Pulp, Pulp threat intelligence, Pulpproject security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":253,"@type":254,"name":255,"description":250,"url":256,"manufacturer":257,"applicationCategory":261,"softwareVersion":262,"mainEntity":263},"https:\u002F\u002Fschema.org","SoftwareApplication","Pulp","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fpulpproject\u002Fpulp",{"@type":258,"name":259,"url":260},"Organization","Pulpproject","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpulpproject","Security Software","57 versions tracked",{"@type":264,"name":265,"description":266,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Pulp Security Vulnerabilities","Security vulnerabilities affecting Pulp by Pulpproject",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":268,"apiVersion":269},"2026-10-17T19:42:56.650Z","3.0",{"rows":271,"total":11,"capped":16,"failed":11},[],[273],{"product":274,"cves":49},"pulp_ansible"]