CVE:CVE-2022-3644
CNNVD:CNNVD-202210-2106
pulp_ansible是Pulp开源的一个支持托管 Role 和 Collection Ansible 内容的 Pulp 插件。
pulp_ansible存在安全漏洞，该漏洞源于以明文形式存储令牌，而不是使用pulp的加密字段。
solution:Upgrade pulpproject pulp_ansible to a higher version than -; Upgrade redhat ansible_automation_platform to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat satellite to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat update_infrastructure to a higher version than 3.0,and avoid the version 3.0