Lucene search
UbuntuUSN-2004-1HistoryOct 23, 2013 - 12:00 a.m.
python-glanceclient vulnerability
2013-10-2300:00:00
ubuntu.com
42
6.2 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
55.0%
Releases
- Ubuntu 13.04
Packages
- python-glanceclient - Client library for Openstack glance server.
Details
Thomas Leaman discovered that the Python client library for Glance did not
properly verify SSL certificates. A remote attacker could exploit this to
perform a machine-in-the-middle attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.04 | noarch | python-glanceclient | < 1:0.9.0-0ubuntu1.2 | UNKNOWN |
References
Related
fedora
fedora
[SECURITY] Fedora 19 Update: python-glanceclient-0.9.0-3.fc19
2013-11-14 03:34:13
nessus
nessus
Fedora 19 : python-glanceclient-0.9.0-3.fc19 (2013-14814)
2013-11-14 00:00:00
openSUSE Security Update : python-glanceclient (openSUSE-SU-2013:1330-1)
2014-06-13 00:00:00
Ubuntu 13.04 : python-glanceclient vulnerability (USN-2004-1)
2013-10-24 00:00:00
securityvulns
securityvulns
[USN-2004-1] python-glanceclient vulnerability
2013-10-28 00:00:00
OpenStack multiple security vulnerabilities
2013-12-23 00:00:00
redhat
redhat
(RHSA-2013:1200) Moderate: python-glanceclient security update
2013-09-03 00:00:00
debiancve
debiancve
CVE-2013-4111
2013-08-28 21:55:00
osv
osv
python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate
2022-05-14 02:10:39
PYSEC-2013-11
2013-08-28 21:55:00
github
github
cve
cve
CVE-2013-4111
2013-08-28 21:55:00
openvas
openvas
Fedora Update for python-glanceclient FEDORA-2013-14814
2013-11-18 00:00:00
Fedora Update for python-glanceclient FEDORA-2013-14814
2013-11-18 00:00:00
Ubuntu Update for python-glanceclient USN-2004-1
2013-10-29 00:00:00
prion
prion
Code injection
2013-08-28 21:55:00
ubuntucve
ubuntucve
CVE-2013-4111
2013-08-28 00:00:00
veracode
veracode
Preverify_ok Value Incorrectly Checked
2019-01-15 08:58:24
6.2 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
55.0%
Related for USN-2004-1