Ovirt Ovirt-Engine-Cli vulnerabilities

1 known vulnerability affecting ovirt/ovirt-engine-cli.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2012-3533MEDIUMCVSS 5.0≤ 3.1.0.52012-08-31

CVE-2012-3533 [MEDIUM] CWE-310 CVE-2012-3533: The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL cer The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.