A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python-scciclient | Nov 8, 2022 | Sep 1, 2022 |
| Redhat Openshift | — | Upgrade python-simplejsonUpgrade butaneUpgrade python-monotonicUpgrade python-simplegenericUpgrade python-nose-cover3Upgrade python-oslo-concurrencyUpgrade python-hypothesisUpgrade python-atomicwritesUpgrade python-noseUpgrade rust-bootupdUpgrade python-entrypointsUpgrade openstack-ironic-python-agentUpgrade python-testresourcesUpgrade python-coloramaUpgrade python-osc-libUpgrade python-freezegunUpgrade python-oslo-utilsUpgrade python-zippUpgrade python-werkzeugUpgrade python-toxUpgrade python-clickUpgrade python-testtoolsUpgrade python-flitUpgrade python-oslo-middlewareUpgrade python-dracclientUpgrade python-oslotestUpgrade python-decoratorUpgrade python-swiftclientUpgrade ovn22.09Upgrade python-logutilsUpgrade ovn22.06Upgrade python-requestsexceptionsUpgrade python-pasteUpgrade python-sqlparseUpgrade python-oslo-cacheUpgrade python-unittest2Upgrade runcUpgrade python-oslo-configUpgrade python-virtualenvUpgrade python-contextlib2Upgrade python-pexpectUpgrade skopeoUpgrade python-singledispatchUpgrade openshiftUpgrade python-pymemcacheUpgrade python-os-service-typesUpgrade python-voluptuousUpgrade python-oslo-i18nUpgrade crunUpgrade python-glanceclientUpgrade python-constructUpgrade python-keyringUpgrade python-waitressUpgrade python-geventUpgrade python-testrepositoryUpgrade python-webtestUpgrade python-tenacityUpgrade containernetworking-pluginsUpgrade python-pycadfUpgrade python-distlibUpgrade ignitionUpgrade python-autopageUpgrade pysnmpUpgrade python-cliffUpgrade python-debtcollectorUpgrade python-pyghmiUpgrade python-soupsieveUpgrade python-beautifulsoup4Upgrade python-warlockUpgrade python-greenletUpgrade python-zope-testingUpgrade atomic-openshift-service-idlerUpgrade podmanUpgrade openshift-clientsUpgrade python-pycdlibUpgrade python-memcachedUpgrade python-zope-interfaceUpgrade python-sureUpgrade python-sushyUpgrade python-hardwareUpgrade python-oslo-serializationUpgrade python-stestrUpgrade python-iso8601Upgrade python-toozUpgrade python-mox3Upgrade openshift-kuryrUpgrade python-traceback2Upgrade python-oslo-reportsUpgrade conmon-rsUpgrade python-oslo-policyUpgrade python-msgpackUpgrade python-ifaddrUpgrade rpm-ostreeUpgrade python-linecache2Upgrade criuUpgrade python-filelockUpgrade python-rfc3986Upgrade python-extrasUpgrade python-oslo-dbUpgrade python-fastenersUpgrade python-cachetoolsUpgrade python-betamaxUpgrade nmstateUpgrade python-jinja2Upgrade python-bcryptUpgrade toolboxUpgrade ansible-runnerUpgrade python-keystoneauth1Upgrade python-pyroute2Upgrade python-pycodestyleUpgrade python-retryingUpgrade python-cinderclientUpgrade python-yappiUpgrade openshift-ansibleUpgrade python-osprofilerUpgrade crudiniUpgrade python-eventletUpgrade containers-commonUpgrade python-redisUpgrade python-vineUpgrade python-pytest-covUpgrade python-pytest-runnerUpgrade python-cmd2Upgrade python-zakeUpgrade python-pytest-forkedUpgrade python-openstacksdkUpgrade python-ironic-prometheus-exporterUpgrade ansible-runner-httpUpgrade python-keystonemiddlewareUpgrade python-statsdUpgrade python-caseUpgrade openstack-macrosUpgrade console-login-helper-messagesUpgrade python-requests-unixsocketUpgrade python-pintUpgrade python-oslo-metricsUpgrade slirp4netnsUpgrade NetworkManagerUpgrade grpcUpgrade python-wsmeUpgrade python-mccabeUpgrade python-requests-kerberosUpgrade python-requests-mockUpgrade python-os-traitsUpgrade futureUpgrade python-automatonUpgrade coreos-installerUpgrade python-os-client-configUpgrade python-repoze-lruUpgrade python-kazooUpgrade python-fixturesUpgrade python-migrateUpgrade python-lockfileUpgrade openstack-ironicUpgrade python-pyperclipUpgrade python-packagingUpgrade python-scciclientUpgrade python-defusedxmlUpgrade python-pbrUpgrade python-pyrsistentUpgrade python-oslo-messagingUpgrade openstack-ironic-inspectorUpgrade python-wcwidthUpgrade python-webencodingsUpgrade python-oslo-logUpgrade python-stevedoreUpgrade python-kerberosUpgrade python-jsonpath-rwUpgrade python-proliantutilsUpgrade python-itsdangerousUpgrade cri-oUpgrade python-coverageUpgrade python-smiUpgrade python-sushy-oem-idracUpgrade cri-toolsUpgrade tiniUpgrade python-amqpUpgrade rust-afterburnUpgrade python-funcsigsUpgrade haproxyUpgrade python-jsonschemaUpgrade python-paste-deployUpgrade python-prometheus_clientUpgrade container-selinuxUpgrade python-flake8Upgrade openvswitch2.17Upgrade libslirpUpgrade subunitUpgrade python-more-itertoolsUpgrade python-routesUpgrade ostreeUpgrade python-flaskUpgrade python-typeguardUpgrade python-oslo-rootwrapUpgrade python-futuristUpgrade python-neutronclientUpgrade kata-containersUpgrade python-hackingUpgrade python-mimeparseUpgrade python-kubernetesUpgrade python-kiwisolverUpgrade python-tornadoUpgrade python-oslo-contextUpgrade python-keystoneclientUpgrade python-testscenariosUpgrade conmonUpgrade python-editorUpgrade python-typing-extensionsUpgrade python-zope-eventUpgrade python-wraptUpgrade python-ironic-libUpgrade python-zeroconfUpgrade python-html5libUpgrade python-oslo-versionedobjectsUpgrade python-mockUpgrade python-pytest-xprocessUpgrade python-dogpile-cacheUpgrade python-oslo-upgradecheckUpgrade python-sortedcontainersUpgrade python-ironicclientUpgrade python-kafkaUpgrade python-pretendUpgrade python-munchUpgrade python-alembicUpgrade python-rsaUpgrade pyOpenSSLUpgrade fuse-overlayfsUpgrade python-kombuUpgrade python-apipkgUpgrade buildahUpgrade python-webobUpgrade kernel-rtUpgrade pyflakesUpgrade python-dataclassesUpgrade python-tox-current-envUpgrade python-ddtUpgrade python-tempitaUpgrade python-oslo-serviceUpgrade python-pytest-xdistUpgrade python-gunicornUpgrade python-markupsafeUpgrade python-pecanUpgrade python-sqlalchemyUpgrade python-importlib-metadataUpgrade python-SecretStorageUpgrade python-execnet | Oct 16, 2023 | Jun 1, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub