CVE-2012-3533

Description

The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/77984

https://bugzilla.redhat.com/show_bug.cgi?id=851672

http://www.securityfocus.com/bid/55208

http://www.openwall.com/lists/oss-security/2012/08/26/1

http://www.openwall.com/lists/oss-security/2012/08/24/6

http://secunia.com/advisories/50409

http://gerrit.ovirt.org/#/c/7249/

http://gerrit.ovirt.org/#/c/7209/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS