Pulp prior to 2.8.3 creates a temporary directory during CA key generation in an insecure manner.
pulpproject pulp 2.8.2-1