CVE-2016-3112: High severity pulp project vulnerability
client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer private keys and escalate privileges by reading /etc/pki/pulp/consumer/consumer-cert, and authenticating as a consumer user.
Other sources
It was reported that certificate that identifies agent is written to etc/pki/pulp/consumer/consumer-cert.pem with 644 permissions and contains also the private key, making it world-readable.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3112?
CVE-2016-3112 has a high severity rating due to the exposure of sensitive private keys.
How do I fix CVE-2016-3112?
To fix CVE-2016-3112, upgrade to Pulp version 2.8.3 or later to ensure proper permissions on consumer private keys.
What type of vulnerability is CVE-2016-3112?
CVE-2016-3112 is a privilege escalation vulnerability caused by improper file permissions.
Who is affected by CVE-2016-3112?
Users running Pulp versions prior to 2.8.3 with improperly secured consumer private keys are affected by CVE-2016-3112.
What can attackers do with CVE-2016-3112?
Attackers can exploit CVE-2016-3112 to read consumer private keys, potentially leading to privilege escalation.