Lucene search
+L

7 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/21 12:00 a.m.•4 views

The vulnerability of the Token Storage Mechanism in the CollectionRemote plugin of the Ansible-content management tool pulp_ansible on the Pulp repository management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CollectionRemote mechanism, a plugin for managing Ansible content on the pulpansible platform, which manages repositories for Pulp, relates to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...

5.5CVSS6.2AI score0.00281EPSS
SaveExploits1References8Affected Software2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-7155

Malicious code in bioql PyPI...

5.5CVSS5.1AI score0.00281EPSS
SaveExploits1References5
OSV
OSV
•added 2022/10/25 7:00 p.m.•24 views

GHSA-QV37-MFJF-42H8 Plaintext storage of tokens in pulp_ansible

The collection remote for pulpansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API instead of marking it as write only...

5.5CVSS5.7AI score0.00281EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/10/25 7:00 p.m.•38 views

Plaintext storage of tokens in pulp_ansible

The collection remote for pulpansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API instead of marking it as write only...

5.5CVSS5.6AI score0.00281EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2022/10/25 6:15 p.m.•44 views

CVE-2022-3644

The collection remote for pulpansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API instead of marking it as write only...

5.5CVSS0.00281EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/10/25 12:00 a.m.•8 views

CVE-2022-3644

The collection remote for pulpansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API instead of marking it as write only...

5.5AI score0.00281EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2022/10/21 5:17 p.m.•52 views

CVE-2022-3644

A flaw exists in the collection remote for pulpansible, where tokens are stored in plaintext instead of using pulp's encrypted field. This flaw allows an attacker with sufficient privileges to read the stored tokens, resulting in the loss of confidentiality...

4.1CVSS4.9AI score0.00281EPSS
SaveExploits1References3
Rows per page
Query Builder