CVE-2024-31884

A flaw was found in Ceph. An attacker can allow Ceph to accept anycertificate because no certificate context is passed via Pybind to theconstructors imaplib.IMAP4SSL or smtplib.SMTPSSL. As a result, pybind pybinddoes not check the server's X.509certificate, instead accepting any certificate. This...