What is CVE-2018-10917?

CVE-2018-10917 is a medium-severity vulnerability in Pulpproject Pulp, classified under Path Traversal. CVSS score: 6.8/10. Published 2018-08-15.

How severe is CVE-2018-10917?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Path Traversal in Pulpproject Pulp

CVE-2018-10917

pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.011 (61.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H.

Affected products

Pulpproject Pulp — versions 2.16.1, 2.16.2, 2.16.4
[Unknown] Pulp — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)

Frequently asked questions

What is CVE-2018-10917?: CVE-2018-10917 is a medium-severity vulnerability in Pulpproject Pulp, classified under Path Traversal. CVSS score: 6.8/10. Published 2018-08-15.
How severe is CVE-2018-10917?: Medium severity. CVSS v3 base score is 6.8 out of 10.