Lucene search
GoogleOSV:GHSA-PRCQ-52F8-FP44HistoryMay 17, 2022 - 5:19 a.m.
Apache Libcloud vulnerable to certificate impersonation
2022-05-1705:19:14
Google
osv.dev
2
apache
libcloud
certificate impersonation
vulnerability
ssl servers
x.509 certificate
Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject’s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
Related
cvelist
cvelist
CVE-2012-3446
2012-11-04 22:00:00
nessus
nessus
openvas
openvas
FreeBSD Ports: py-libcloud
2012-08-30 00:00:00
FreeBSD Ports: py-libcloud
2012-08-30 00:00:00
nvd
nvd
CVE-2012-3446
2012-11-04 22:55:03
freebsd
freebsd
debiancve
debiancve
CVE-2012-3446
2012-11-04 22:55:03
prion
prion
Code injection
2012-11-04 22:55:00
github
github
Apache Libcloud vulnerable to certificate impersonation
2022-05-17 05:19:14
ubuntucve
ubuntucve
CVE-2012-3446
2012-11-04 00:00:00
osv
osv
PYSEC-2012-12
2012-11-04 22:55:00
cve
cve
CVE-2012-3446
2012-11-04 22:55:03