CVE-2015-5263

CVE-2015-5263 describes a critical vulnerability in pulp-consumer-client versions 2.4.0 through 2.6.3, where the client fails to validate the server's TLS certificate signatures during public key retrieval upon registration. This oversight allows for a man-in-the-middle attack, enabling an attacker to intercept and potentially manipulate communications. With a CVSS v3 score of 8.1 (High), the vulnerability is remotely exploitable with high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.