CVE-2018-1090
In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer.…
Published: 2018-06-18 · CVSS: 5.5 · CVSS 3.0
In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7