cbcvebase.
CVE-2015-5263
published 2017-09-25

CVE-2015-5263: pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registration.

PriorityP336high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
0.87%
54.6th percentile
pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registration.

Affected

13 ranges
VendorProductVersion rangeFixed in
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——
pulpprojectpulp——

CVSS provenance

nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.