The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world-readable file in the “/etc/pki/pulp/nodes/” directory, which allows local users to gain access to sensitive data.

No comments yet.

Leave a Reply

Please leave these two fields as-is:

Protected by Invisible Defender. Showed 403 to 1,006,343 bad guys.