← Database

CVE-2022-3644

MEDIUM CVSS: 5.5 Published: 2022-10-25 Modified: 2026-06-17

Description

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

Affected Platforms

Redhat Update InfrastructurePulpproject Pulp AnsibleRedhat Ansible Automation PlatformRedhat Satellite

Weakness Type

CWE-256, CWE-522

References