SUSE CVE-2013-6396

The OpenStack Python client library for Swift python-swiftclient 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Fedora 20 : python-swiftclient-2.0.2-1.fc20 (2014-3054)

Update to upstream 2.0.2 Add SSL certificate verification by default CVE-2013-6396 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2013-6396

The CVE-2013-6396 entry concerns the OpenStack Python Swift client, python-swiftclient, versions 1.0 through 1.9.0, which do not verify X.509 certificates on SSL connections. This allows an attacker to perform a man-in-the-middle attack to spoof the Swift server and read sensitive data via a craf...