CVE-2022-2996

Published: 01/09/2022 Updated: 12/12/2022

CVSS v3 Base Score: 7.4 | Impact Score: 5.2 | Exploitability Score: 2.2

VMScore: 0

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
python-scciclient project python-scciclient 0.11.0
debian debian linux 10.0

Synopsis Moderate: Red Hat OpenStack Platform 1624 (python-scciclient) security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-scciclient is now available for Red Hat OpenStackPlatform 1624 ...

Synopsis Moderate: Red Hat OpenStack Platform 1619 (python-scciclient) security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-scciclient is now available for Red Hat OpenStackPlatform 1619 ...

Debian Bug report logs - #1018213 python-scciclient: CVE-2022-2996: missing server certificate verification Package: src:python-scciclient; Maintainer for src:python-scciclient is Debian OpenStack <team+openstack@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 27 Aug 2022 07:12:02 ...

CWE-295 https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html https://access.redhat.com/errata/RHSA-2022:8854 https://nvd.nist.gov

CVE-2022-2996

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect