Lucene search
RedhatCVELIST:CVE-2016-3704HistoryJun 13, 2017 - 5:00 p.m.
CVE-2016-3704
2017-06-1317:00:00
redhat
www.cve.org
6
Pulp before 2.8.5 uses bash’s $RANDOM in an unsafe way to generate passwords.
References
access.redhat.com/errata/RHSA-2018:0336
bugzilla.redhat.com/show_bug.cgi?id=1330264
docs.pulpproject.org/user-guide/release-notes/2.8.x.html#pulp-2-8-5
github.com/pulp/pulp/blob/pulp-2.8.2-1/server/bin/pulp-qpid-ssl-cfg#L25
github.com/pulp/pulp/blob/pulp-2.8.2-1/server/bin/pulp-qpid-ssl-cfg#L97-L105
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YM2LCC7QBRCK4LTN5EZT5OHTVAR3MYTY/
pulp.plan.io/issues/1858
Related
osv
osv
CVE-2016-3704
2017-06-13 17:29:00
nvd
nvd
CVE-2016-3704
2017-06-13 17:29:00
prion
prion
Code injection
2017-06-13 17:29:00
veracode
veracode
Authentication Bypass
2019-05-16 02:19:09
cve
cve
CVE-2016-3704
2017-06-13 17:29:00
openvas
openvas
Fedora Update for pulp-puppet FEDORA-2016-4373f7d32a
2016-08-18 00:00:00
Fedora Update for pulp-docker FEDORA-2016-4373f7d32a
2016-08-18 00:00:00
Fedora Update for pulp-rpm FEDORA-2016-4373f7d32a
2016-08-18 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: pulp-python-1.1.2-1.fc24
2016-08-16 19:30:14
[SECURITY] Fedora 24 Update: pulp-2.8.6-1.fc24
2016-08-16 19:30:14
[SECURITY] Fedora 24 Update: pulp-rpm-2.8.6-2.fc24
2016-08-16 19:30:14
nessus
nessus
Fedora 24 : pulp / pulp-docker / pulp-ostree / pulp-puppet / pulp-python / etc (2016-4373f7d32a)
2016-08-17 00:00:00
RHEL 7 : Satellite 6.3 (RHSA-2018:0336)
2018-02-28 00:00:00
redhat
redhat