Description
Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.
Unscored
CVE-2015-5153
EUVD-2015-5164GHSA-gf89-385c-hq37
Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted obje…
Published Aug 18, 2017 · Updated Aug 6, 2024 · Assigned by redhat