CVE-2013-6444

PyWBEM 0.7 and earlier do not verify the server’s hostname against the certificate CN/subjectAltName, enabling MITM spoofing with arbitrary valid certificates. Affected: PyWBEM 0.7 and earlier; root cause: hostname verification missing in SSL validation. Impact: potential partial confidentiality/...

CVE-2013-6418

CVE-2013-6418 affects PyWBEM 0.7 and earlier, where certificate validation occurs over a separate connection, enabling MITM spoofing of peers via arbitrary X.509 certificates. Impact is partial confidentiality/integrity risk as described in linked advisories; exploitation details are not provided...