A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python-scciclient | Nov 8, 2022 | Sep 1, 2022 |
| Redhat Openshift | — | Upgrade criuUpgrade python-stestrUpgrade python-flitUpgrade openshift-ansibleUpgrade python-vineUpgrade python-logutilsUpgrade python-voluptuousUpgrade python-oslo-concurrencyUpgrade python-toxUpgrade python-oslo-reportsUpgrade python-pycdlibUpgrade conmon-rsUpgrade python-constructUpgrade python-sushyUpgrade rust-bootupdUpgrade python-zope-testingUpgrade python-osprofilerUpgrade python-requestsexceptionsUpgrade python-ifaddrUpgrade python-noseUpgrade python-oslo-cacheUpgrade python-pytest-covUpgrade python-monotonicUpgrade python-osc-libUpgrade python-distlibUpgrade openshift-clientsUpgrade podmanUpgrade python-autopageUpgrade python-entrypointsUpgrade python-geventUpgrade python-jinja2Upgrade python-tenacityUpgrade python-betamaxUpgrade python-simplegenericUpgrade python-memcachedUpgrade python-pycadfUpgrade python-bcryptUpgrade ansible-runnerUpgrade python-pyroute2Upgrade python-oslo-serializationUpgrade ovn22.06Upgrade python-keystoneauth1Upgrade python-soupsieveUpgrade python-warlockUpgrade python-testtoolsUpgrade toolboxUpgrade nmstateUpgrade python-oslo-utilsUpgrade python-fastenersUpgrade pysnmpUpgrade python-greenletUpgrade atomic-openshift-service-idlerUpgrade python-linecache2Upgrade python-keyringUpgrade python-testresourcesUpgrade containers-commonUpgrade python-testrepositoryUpgrade python-cliffUpgrade python-webtestUpgrade python-cinderclientUpgrade python-eventletUpgrade ignitionUpgrade python-waitressUpgrade python-msgpackUpgrade python-retryingUpgrade python-extrasUpgrade containernetworking-pluginsUpgrade python-zope-interfaceUpgrade python-filelockUpgrade butaneUpgrade python-pasteUpgrade python-hardwareUpgrade rpm-ostreeUpgrade python-rfc3986Upgrade python-unittest2Upgrade python-os-service-typesUpgrade python-nose-cover3Upgrade python-sureUpgrade python-pytest-forkedUpgrade python-atomicwritesUpgrade python-cachetoolsUpgrade python-oslo-dbUpgrade python-mox3Upgrade python-beautifulsoup4Upgrade python-decoratorUpgrade python-traceback2Upgrade python-oslo-policyUpgrade python-zippUpgrade python-redisUpgrade python-yappiUpgrade python-pexpectUpgrade python-singledispatchUpgrade python-hypothesisUpgrade ovn22.09Upgrade python-pytest-runnerUpgrade python-coloramaUpgrade openshift-kuryrUpgrade python-contextlib2Upgrade python-pycodestyleUpgrade python-oslo-middlewareUpgrade python-sqlparseUpgrade python-swiftclientUpgrade runcUpgrade python-werkzeugUpgrade crunUpgrade python-glanceclientUpgrade python-dracclientUpgrade python-virtualenvUpgrade openshiftUpgrade python-zakeUpgrade python-oslo-i18nUpgrade python-iso8601Upgrade skopeoUpgrade python-simplejsonUpgrade python-debtcollectorUpgrade python-cmd2Upgrade crudiniUpgrade python-toozUpgrade python-pyghmiUpgrade python-freezegunUpgrade openstack-ironic-python-agentUpgrade python-pymemcacheUpgrade python-oslotestUpgrade python-clickUpgrade python-oslo-configUpgrade python-pyperclipUpgrade python-html5libUpgrade cri-toolsUpgrade python-importlib-metadataUpgrade ostreeUpgrade python-migrateUpgrade openvswitch2.17Upgrade rust-afterburnUpgrade python-flake8Upgrade python-oslo-rootwrapUpgrade python-oslo-messagingUpgrade python-ddtUpgrade python-oslo-metricsUpgrade pyflakesUpgrade python-automatonUpgrade python-paste-deployUpgrade python-markupsafeUpgrade python-zeroconfUpgrade cri-oUpgrade slirp4netnsUpgrade python-mccabeUpgrade python-pecanUpgrade python-typeguardUpgrade python-openstacksdkUpgrade python-rsaUpgrade python-kafkaUpgrade python-stevedoreUpgrade python-defusedxmlUpgrade kata-containersUpgrade python-testscenariosUpgrade python-lockfileUpgrade python-webencodingsUpgrade coreos-installerUpgrade conmonUpgrade python-kubernetesUpgrade python-oslo-serviceUpgrade python-jsonpath-rwUpgrade python-requests-mockUpgrade python-statsdUpgrade python-webobUpgrade python-mockUpgrade python-requests-unixsocketUpgrade ansible-runner-httpUpgrade python-requests-kerberosUpgrade python-SecretStorageUpgrade subunitUpgrade python-pintUpgrade python-os-client-configUpgrade python-smiUpgrade python-pytest-xdistUpgrade openstack-macrosUpgrade kernel-rtUpgrade python-pytest-xprocessUpgrade python-kazooUpgrade python-dataclassesUpgrade python-repoze-lruUpgrade python-neutronclientUpgrade python-oslo-contextUpgrade python-ironic-prometheus-exporterUpgrade python-kiwisolverUpgrade python-futuristUpgrade python-os-traitsUpgrade buildahUpgrade libslirpUpgrade python-dogpile-cacheUpgrade python-gunicornUpgrade python-keystonemiddlewareUpgrade python-typing-extensionsUpgrade haproxyUpgrade python-ironicclientUpgrade python-caseUpgrade python-tempitaUpgrade python-munchUpgrade python-packagingUpgrade python-prometheus_clientUpgrade python-oslo-upgradecheckUpgrade python-fixturesUpgrade python-zope-eventUpgrade fuse-overlayfsUpgrade NetworkManagerUpgrade python-pbrUpgrade python-sortedcontainersUpgrade python-pyrsistentUpgrade python-tox-current-envUpgrade console-login-helper-messagesUpgrade python-routesUpgrade python-flaskUpgrade python-wsmeUpgrade python-apipkgUpgrade python-ironic-libUpgrade python-tornadoUpgrade python-funcsigsUpgrade python-itsdangerousUpgrade futureUpgrade python-keystoneclientUpgrade python-mimeparseUpgrade python-alembicUpgrade python-more-itertoolsUpgrade container-selinuxUpgrade python-jsonschemaUpgrade pyOpenSSLUpgrade python-execnetUpgrade python-kombuUpgrade python-editorUpgrade python-hackingUpgrade python-sqlalchemyUpgrade grpcUpgrade python-coverageUpgrade python-sushy-oem-idracUpgrade python-pretendUpgrade python-wcwidthUpgrade openstack-ironicUpgrade python-oslo-logUpgrade python-amqpUpgrade python-scciclientUpgrade python-oslo-versionedobjectsUpgrade python-wraptUpgrade python-kerberosUpgrade tiniUpgrade python-proliantutilsUpgrade openstack-ironic-inspector | Oct 16, 2023 | Jun 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub