pulp vulnerabilities
CVEs whose affected-version data names the pulp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2012-5605Low· 3.3Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This …
▾ SunlitRed Hat · candlepinEPSS 0.32%via CVEORG
CVE-2012-4574Medium· 5.5Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure coul…
▾ SunlitRed Hat · candlepinEPSS 0.36%via CVEORG