[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYjJClCmn1YZ9UE1hlK2E0iYBERtQkN1Yuv8Srj3fnCw":3,"g5a-risk:CVE-2022-3644":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":56,"references":57,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":127,"notableEvents":128},"CVE-2022-3644","What is CVE-2022-3644?","The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read\u002Fwrite mode via the API () instead of marking it as write only.","The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read\u002Fwrite mode via the API () ...","2022-10-25T18:15:10.02","2025-05-07T20:15:21.877",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00292,[34,34,34,34,34,34,34],"Medium",[38,43,48,52],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"pulpproject","pulp_ansible","-","cpe:2.3:a:pulpproject:pulp_ansible:-:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"redhat","ansible_automation_platform","2.0","cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"satellite","6.0","cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":54,"criteria":55,"vulnerable":4},"update_infrastructure","3.0","cpe:2.3:a:redhat:update_infrastructure:3.0:*:*:*:*:*:*:*",4,[58,64],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fgithub.com\u002Fpulp\u002Fpulp_ansible\u002Fblob\u002Fmain\u002Fpulp_ansible\u002Fapp\u002Fmodels.py#L234","GitHub",[62,63],"Exploit","Third Party Advisory",{"url":59,"source":60,"tags":65},[62,63],2,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-256","Plaintext Storage of a Password","Storing a password in plaintext may result in a system compromise.","Password management issues occur when a password is stored in plaintext in an application's properties, configuration file, or memory. Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource. In some contexts, even storage of a plaintext password in memory is considered a security risk if the password is not cleared immediately after it is used.","Incomplete","Base","Simple",{"id":77,"name":78,"description":79,"extendedDescription":80,"status":73,"abstraction":81,"structure":75},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Class",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2022-3644? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-3644, a medium severity cyber security vulnerability from 2022. The collection remote for pulp_ansible stores tokens in pl...","CVE-2022-3644, CVE-2022-3644 vulnerability, CVE-2022-3644 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, pulpproject security, redhat security, pulp_ansible vulnerability, ansible_automation_platform vulnerability, satellite vulnerability, update_infrastructure vulnerability","\u002Fwhat-is\u002Fcve-2022-3644",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-3644","Cybersecurity","CVE-2022-3644, CVE-2022-3644 vulnerability, CVE-2022-3644 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110,117],{"Operator":27,"Negate":27,"Nodes":111},[112],{"Operator":113,"Negate":27,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4DCED721-A508-4E93-ACF5-AB2B6C4BF2C6",{"Operator":27,"Negate":27,"Nodes":118},[119],{"Operator":113,"Negate":27,"CPEMatch":120},[121,123,125],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7B4BE2D6-43C3-4065-A213-5DB1325DC78F",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"848C92A9-0677-442B-8D52-A448F2019903",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"812C62CE-7B5A-491C-A02E-0E848D1FD780",[],[],{"lastModified":11,"cacheTime":130,"version":46},1792266863340,{"score":132,"band":133,"action":134,"scoredAt":135},39,"Low","Monitor","2026-10-16T06:56:03.677919+00:00"]