4 matches found
CVE-2012-3533
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle MITM attack...
Code injection
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle MITM attack...
CVE-2012-3533
The CVE-2012-3533 affects the oVirt 3.1 Python SDK (pre-3.1.0.6) and CLI (pre-3.1.0.8). Root cause: the client did not validate the server SSL certificate against its keys, enabling a MITM to spoof the server. Impact: potential remote spoofing of the server during TLS. Mitigation: upgrade to Pyth...
CVE-2012-3533
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle MITM attack...