CVE-2013-2191

CVE-2013-2191 affects python-bugzilla before 0.9.0; the root cause is that SSL certificate validation is not performed, allowing man‑in‑the‑middle attackers to spoof Bugzilla servers via crafted certificates. Impact is exposure of TLS server identity and potential data tampering during authentica...