Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Pulp |
Pulp_project |
- (including) |
- (including) |
References