CVE-2024-7143

Summary

CVE-2024-7143: A vulnerability was discovered in the Pulp package's role-based access control (RBAC) feature. The issue lies in the `AutoAddObjPermsMixin`, specifically the `add_roles_for_object_creator` method, which sets the current user as the object creator. For tasks, the first user with any permissions on the task object determines the current user, potentially leading to unintended assignment of object permissions to users who did not create the objects. This can result in unauthorized access or misconfiguration, impacting the security and integrity of the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.