high7.5
CVE-2013-7450
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.
Impact
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pulpproject | Pulp | through 2.2.1-1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/04/18/11
- http://www.openwall.com/lists/oss-security/2016/04/18/5
- http://www.openwall.com/lists/oss-security/2016/05/20/1
- https://bugzilla.redhat.com/show_bug.cgi?id=1003326
- https://bugzilla.redhat.com/show_bug.cgi?id=1328345
- https://github.com/pulp/pulp/pull/627
- http://www.openwall.com/lists/oss-security/2016/04/18/11
- http://www.openwall.com/lists/oss-security/2016/04/18/5
- http://www.openwall.com/lists/oss-security/2016/05/20/1
- https://bugzilla.redhat.com/show_bug.cgi?id=1003326
- https://bugzilla.redhat.com/show_bug.cgi?id=1328345
- https://github.com/pulp/pulp/pull/627