PyPI/pulp-ansible CVE-2022-3644: medium 5.5, EPSS 0.30%
Plaintext storage of tokens in pulp_ansible
Action: Upgrade pulp-ansible to 0.15.0 or later.
pip install pulp-ansible==0.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15.0 | - |
Fixed versions
| 0.15.0 |
Sources
- osv: PYSEC-2026-900
- https://nvd.nist.gov/vuln/detail/CVE-2022-3644
- https://github.com/pulp/pulp_ansible/issues/1221
- https://github.com/pulp/pulp_ansible/commit/d13c427b09482a7f598d8ee597d17a8a34888665
- https://github.com/pulp/pulp_ansible
- https://github.com/pulp/pulp_ansible/blob/main/pulp_ansible/app/models.py#L234
- https://pypi.org/project/pulp-ansible
- https://github.com/advisories/GHSA-qv37-mfjf-42h8
CVE-2022-3644 · published · modified · JSON