CVE-2016-3107

Published: Jun 8, 2017
Updated: Apr 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2016-3107" target="_blank" rel="noopener"> CVE-2016-3107
Severity: Medium
Exploit:

The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world-readable file in the "/etc/pki/pulp/nodes/" directory, which allows local users to gain access to sensitive data.