CVE-2016-3696: Exposure of Sensitive Information to an Unauthorized Actor

The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key...