EUVD-2014-8008

Malware in sbrugna...

CVE-2014-8167

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

Design/Logic Flaw

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

CVE-2014-8167

CVE-2014-8167 affects vdsm and vdsclient; the root cause is missing hostname validation when communicating with another vdsm, which could allow a man-in-the-middle attack. The connected sources confirm the vulnerable component and the behavioral flaw, but do not provide a patch version or mitigat...