CVE-2013-2191

2014-02-0800:55:06

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

48.3%

JSON

python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.

Affected configurations

Nvd

Node

python_bugzilla_projectpython-bugzillaRange≤0.8.0

python_bugzilla_projectpython-bugzillaMatch0.6.0

python_bugzilla_projectpython-bugzillaMatch0.6.1

python_bugzilla_projectpython-bugzillaMatch0.6.2

python_bugzilla_projectpython-bugzillaMatch0.7.0

Node

fedoraprojectfedoraMatch17

fedoraprojectfedoraMatch18

opensuseopensuseMatch11.4

opensuseopensuseMatch12.2

opensuseopensuseMatch12.3

VendorProductVersionCPE
python_bugzilla_projectpython-bugzilla*cpe:2.3:a:python_bugzilla_project:python-bugzilla:*:*:*:*:*:*:*:*
python_bugzilla_projectpython-bugzilla0.6.0cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.6.0:*:*:*:*:*:*:*
python_bugzilla_projectpython-bugzilla0.6.1cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.6.1:*:*:*:*:*:*:*
python_bugzilla_projectpython-bugzilla0.6.2cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.6.2:*:*:*:*:*:*:*
python_bugzilla_projectpython-bugzilla0.7.0cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.7.0:*:*:*:*:*:*:*
fedoraprojectfedora17cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*
fedoraprojectfedora18cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*
opensuseopensuse11.4cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
opensuseopensuse12.2cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
opensuseopensuse12.3cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
python_bugzilla_project	python-bugzilla	*	cpe:2.3:a:python_bugzilla_project:python-bugzilla::::::::
python_bugzilla_project	python-bugzilla	0.6.0	cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.6.0:::::::*
python_bugzilla_project	python-bugzilla	0.6.1	cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.6.1:::::::*
python_bugzilla_project	python-bugzilla	0.6.2	cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.6.2:::::::*
python_bugzilla_project	python-bugzilla	0.7.0	cpe:2.3:a:python_bugzilla_project:python-bugzilla:0.7.0:::::::*
fedoraproject	fedora	17	cpe:2.3:o:fedoraproject:fedora:17:::::::*
fedoraproject	fedora	18	cpe:2.3:o:fedoraproject:fedora:18:::::::*
opensuse	opensuse	11.4	cpe:2.3:o:opensuse:opensuse:11.4:::::::*
opensuse	opensuse	12.2	cpe:2.3:o:opensuse:opensuse:12.2:::::::*
opensuse	opensuse	12.3	cpe:2.3:o:opensuse:opensuse:12.3:::::::*