CVE-2016-3111: Infoleak
It was found that spec file generating RSA keys, used for authenticating messages between server and consumers, as post installation step does this in world-readable directories for a brief moment.
Vulnerable code:
https://github.com/pulp/pulp/blob/master/pulp.spec#L473-L486 https://github.com/pulp/pulp/blob/master/pulp.spec#L894-L903
Other sources
pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp consumers in a directory that is world-readable before later modifying the permissions, which might allow local users to read the generated RSA keys via reading the key files while the installation process is running.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3111?
CVE-2016-3111 has been rated as a low-severity vulnerability due to the brief exposure of RSA keys in world-readable directories.
How do I fix CVE-2016-3111?
To fix CVE-2016-3111, ensure the generation of RSA keys occurs in a secure, non-world-readable directory during the post-installation process.
What software versions are affected by CVE-2016-3111?
CVE-2016-3111 affects all versions of the Pulp Project up to and including 2.8.2-1.
What type of vulnerability is CVE-2016-3111?
CVE-2016-3111 is classified as an exposure of sensitive information vulnerability.
Is CVE-2016-3111 exploitable remotely?
CVE-2016-3111 is not directly exploitable remotely, but it poses a risk if an attacker gains access to the server during the key generation phase.