CVE-2022-3644: Pulpproject Pulp Ansible

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

Affected products

• Pulpproject Pulp Ansible: affected versions not specified
• Red Hat Ansible Automation Platform: version 2.0 only
• Red Hat Satellite: version 6.0 only
• Red Hat Update Infrastructure: version 3.0 only

Published 2022-10-25. Last modified 2026-06-17.