Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Pulp | Pulp_project | - (including) | - (including) |
References
