CVE-2015-5153: Pulp Project Pulp

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.

Affected products

• Pulp Project Pulp: affected versions not specified

Published 2017-08-18. Last modified 2026-06-17.