REDHAT-BUG-1243526: Low severity Pulp Pulp vulnerability

Published Jul 15, 2015

Updated

It is reported by Austin Macdonald that pulp fails to properly remove existing permissions when an object is deleted (e.g. a user account), if an object with the same name is later created it will inherit the previous permissions leading to a potential privilege escalation. Please note that due to the manner in which pulp is used in Satellite6 it is not vulnerable.

Affected Software

1 affected component

Pulp Pulp

Event History

Jul 15, 2015

Data Sourced

via Red Hat·04:41 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1243526?

The severity of REDHAT-BUG-1243526 is classified as low.

What issues does REDHAT-BUG-1243526 present?

REDHAT-BUG-1243526 presents a risk of privilege escalation due to improper removal of permissions for deleted objects in Pulp.

How do I fix REDHAT-BUG-1243526?

To address REDHAT-BUG-1243526, ensure that permission management is properly implemented to remove permissions of deleted objects.

Who reported the issue in REDHAT-BUG-1243526?

The issue in REDHAT-BUG-1243526 was reported by Austin Macdonald.

When was REDHAT-BUG-1243526 published?

REDHAT-BUG-1243526 was published on July 15, 2015.