| |
Vulnerability CVE-2022-3644
Published: 2022-10-25
| Description: |
The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only. |
Type:
CWE-256 (Plaintext Storage of a Password)
References: |
https://github.com/pulp/pulp_ansible/blob/main/pulp_ansible/app/models.py#L234
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
