CVE-2015-5153
Pulp: permissions removal issue when objects deleted
Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.
CVSS 3.0 · 8.8 High
EPSS 1.2%
KEV · Not listed
Vendors
Products