CVE-2022-3644

2022-10-2500:00:00

CWE-256

redhat

www.cve.org

cve-2022-3644

pulp ansible

plaintext tokens

write api

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

17.8%

JSON

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp’s encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "pulp_ansible",
    "versions": [
      {
        "version": "0.15",
        "status": "affected"
      }
    ]
  }
]