Description (CNA)
The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / pulp_ansible | affected 0.15 |
CWE
CWE-256
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.