Description
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
Published: 2022-09-01
Score: 7.4 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-3180-1 python-scciclient security update
EUVD EUVD EUVD-2022-0408 A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
Github GHSA Github GHSA GHSA-rf3f-3p37-2qh4 python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
History

No history.

Subscriptions

Debian Debian Linux
Python-scciclient Project Python-scciclient
Redhat Openshift Openshift Ironic Openstack
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-03T00:52:59.945Z

Reserved: 2022-08-25T00:00:00.000Z

Link: CVE-2022-2996

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-01T18:15:09.147

Modified: 2024-11-21T07:02:03.350

Link: CVE-2022-2996

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-06-01T00:00:00Z

Links: CVE-2022-2996 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses