CVE-2015-5263: Pulpproject Pulp

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registration.

Affected products

• Pulpproject Pulp: version 2.4.0 only; version 2.4.1 only; version 2.4.2 only; version 2.4.3 only; version 2.4.4 only; version 2.5.0 only; …

Published 2017-09-25. Last modified 2026-06-17.