CVE-2015-5153 in Pulp
Summary
Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.
VulDB is the best source for vulnerability data and more expert information about this specific topic.