Lucene search

MitreCVE-2013-7450

HistoryApr 03, 2017 - 3:59 p.m.

CVE-2013-7450

2017-04-0315:59:00

CWE-295

mitre

web.nvd.nist.gov

cve-2013-7450

pulp

security

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.002

Percentile

61.9%

JSON

Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.

Affected configurations

Nvd

Node

pulpprojectpulpRange≤2.2.1-1

VendorProductVersionCPE
pulpprojectpulp*cpe:2.3:a:pulpproject:pulp:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pulpproject	pulp	*	cpe:2.3:a:pulpproject:pulp::::::::

References

www.openwall.com/lists/oss-security/2016/04/18/11

www.openwall.com/lists/oss-security/2016/04/18/5

www.openwall.com/lists/oss-security/2016/05/20/1

bugzilla.redhat.com/show_bug.cgi?id=1003326

bugzilla.redhat.com/show_bug.cgi?id=1328345

github.com/pulp/pulp/pull/627

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.002

Percentile

61.9%

JSON

Related for CVE-2013-7450