CVE-2010-4340

Affected software: Libcloud prior to version 0.4.1. Vulnerability: TLS/SSL certificate validation is not performed for HTTPS connections, enabling a remote attacker to perform a man‑in‑the‑middle (MITM) attack and potentially bypass access restrictions. Impact (as stated): spoofed certificates co...

CVE-2012-3446

Apache Libcloud before 0.11.1 suffers from an incorrect regular expression in hostname verification against the X.509 certificate’s CN/subjectAltName, allowing MITM via crafted certificates. Affected versions: Libcloud prior to 0.11.1. Root cause: faulty domain name matching logic in SSL verifica...

CVE-2013-6480

CVE-2013-6480 affects Libcloud 0.12.3–0.13.2 where destroy DigitalOcean API calls do not set scrub_data, enabling local users with access to a new VM to obtain sensitive data. The incident is documented by multiple advisories (GHSA-G892-9H8M-R69R, OSV) and vendor/openSUSE/Fedora records. The publ...