CVE-2015-5263

Published: Sep 25, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registration.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://cve.killedkenny.io/cve/CVE-2015-5263

x_refsource_MISC

[oss-security] 20150924 Pulp 2.6.4 released for CVE-2015-5263

mailing-list

x_refsource_MLIST

https://github.com/pulp/pulp/commit/b542d7465f7e6e02e1ea1aec059ac607a65cefe7#diff-17110211f89c042a9267e2167dedd754

x_refsource_CONFIRM

https://github.com/pulp/pulp/blob/aa432bf58497b5e3682333b1d5f5ae4f45788a61/client_consumer/pulp/client/consumer/cli.py#L103

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-5263

Description

Affected Products

References