pulp-consumer-client 2.4.0 through 2.6.3 does not check the servers TLS certificate signatures when retrieving the servers public key upon registration.
The product does not validate, or incorrectly validates, a certificate.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Pulp | Pulpproject | 2.4.1 | 2.4.1 |
Pulp | Pulpproject | 2.4.2 | 2.4.2 |
Pulp | Pulpproject | 2.4.3 | 2.4.3 |
Pulp | Pulpproject | 2.4.4 | 2.4.4 |
Pulp | Pulpproject | 2.4.0 | 2.4.0 |