1. Home
  2. CVE Database
  3. CVE-2015-5153
HIGH · 8.8

CVE-2015-5153

Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.

Vulnerability Description

Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Pulp ProjectPulp-

Related Weaknesses (CWE)

CWE-275

References

FAQ

What is CVE-2015-5153?

CVE-2015-5153 is a vulnerability with a CVSS score of 8.8 (HIGH). Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.

How severe is CVE-2015-5153?

CVE-2015-5153 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-5153?

Check the references section above for vendor advisories and patch information. Affected products include: Pulp Project Pulp.