1 matches found
pulpcore: RBAC permissions incorrectly assigned in tasks that create objects
A flaw was found in the Pulp package. When a role-based access control RBAC object in Pulp is set to assign permissions on its creation, it uses the AutoAddObjPermsMixin typically the addrolesforobjectcreator method. This method finds the object creator by checking the current authenticated user...
8.3CVSS6.8AI score0.0061EPSS
SaveExploits0References6
20