CVE-2012-3533
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
| Software | From | Fixed in |
|---|---|---|
| ovirt / ovirt-engine-cli | - | 3.1.0.5.x |
| ovirt-engine-sdk / 3.1.0.5 | - | - |
| ovirt / ovirt | 3.1 | 3.1.x |
- http://gerrit.ovirt.org/#/c/7209/
- http://gerrit.ovirt.org/#/c/7249/
- http://secunia.com/advisories/50409
- http://www.openwall.com/lists/oss-security/2012/08/24/6
- http://www.openwall.com/lists/oss-security/2012/08/26/1
- http://www.securityfocus.com/bid/55208
- https://bugzilla.redhat.com/show_bug.cgi?id=851672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77984
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime