CVE-2016-3696: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.

Affected products

• Fedoraproject Fedora: version 24 only
• Pulpproject Pulp: up to and including 2.8.4

Published 2017-06-13. Last modified 2026-06-17.