CVEvulnerability
CVE-2012-3533
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-310
Description
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
Affected configurations
• ovirt ovirt 3.1
• ovirt ovirt-engine-cli (<= 3.1.0.5)
• ovirt-engine-sdk 3.1.0.5
Related
Weakness · not in database (1)
References
- http://gerrit.ovirt.org/#/c/7209/ gerrit.ovirt.org
- http://gerrit.ovirt.org/#/c/7249/ gerrit.ovirt.org
- http://secunia.com/advisories/50409 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/08/24/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/08/26/1 www.openwall.com
- http://www.securityfocus.com/bid/55208 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=851672 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77984 exchange.xforce.ibmcloud.com
- http://gerrit.ovirt.org/#/c/7209/ gerrit.ovirt.org
- http://gerrit.ovirt.org/#/c/7249/ gerrit.ovirt.org
- http://secunia.com/advisories/50409 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/08/24/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/08/26/1 www.openwall.com
- http://www.securityfocus.com/bid/55208 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=851672 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77984 exchange.xforce.ibmcloud.com