CVE-2013-6396

2014-02-1819:55:04

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.001

Percentile

25.9%

JSON

The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

OSVersionArchitecturePackageVersionFilename
Debian12allpython-swiftclient< 1:2.0.2-1python-swiftclient_1:2.0.2-1_all.deb
Debian11allpython-swiftclient< 1:2.0.2-1python-swiftclient_1:2.0.2-1_all.deb
Debian999allpython-swiftclient< 1:2.0.2-1python-swiftclient_1:2.0.2-1_all.deb
Debian13allpython-swiftclient< 1:2.0.2-1python-swiftclient_1:2.0.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	python-swiftclient	< 1:2.0.2-1	python-swiftclient_1:2.0.2-1_all.deb
Debian	11	all	python-swiftclient	< 1:2.0.2-1	python-swiftclient_1:2.0.2-1_all.deb
Debian	999	all	python-swiftclient	< 1:2.0.2-1	python-swiftclient_1:2.0.2-1_all.deb
Debian	13	all	python-swiftclient	< 1:2.0.2-1	python-swiftclient_1:2.0.2-1_all.deb