Non-encrypted confidential information In pulp-ansible
Description
Plaintext storage of tokens in pulp_ansible The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | 0.15.0 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.