EUVD-2014-8008

Malware in sbrugna...

CVE-2014-8167

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

Design/Logic Flaw

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

CVE-2014-8167

CVE-2014-8167 affects vdsm and vdsclient; the root cause is missing hostname validation when communicating with another vdsm, which could allow a man-in-the-middle attack. The connected sources confirm the vulnerable component and the behavioral flaw, but do not provide a patch version or mitigat...

CVE-2014-8167: Improper Certificate Validation

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

PT-2019-7140

Name of the Vulnerable Software and Affected Versions vdsm and vdsclient affected versions not specified Description The issue concerns a lack of validation of certificate hostnames from other vdsm instances, which could facilitate a man-in-the-middle attack. Recommendations At the moment, there ...