A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python-scciclient | Nov 8, 2022 | Sep 1, 2022 |
| Redhat Openshift | — | Upgrade python-oslo-upgradecheckUpgrade python-oslo-versionedobjectsUpgrade python-tox-current-envUpgrade python-kubernetesUpgrade kata-containersUpgrade python-futuristUpgrade python-flaskUpgrade python-oslo-rootwrapUpgrade python-oslo-messagingUpgrade python-oslo-logUpgrade python-jsonpath-rwUpgrade python-ddtUpgrade python-pbrUpgrade python-zope-eventUpgrade python-mockUpgrade python-kazooUpgrade python-ironicclientUpgrade python-testscenariosUpgrade python-markupsafeUpgrade NetworkManagerUpgrade python-alembicUpgrade ostreeUpgrade python-oslo-serviceUpgrade python-smiUpgrade slirp4netnsUpgrade python-sqlalchemyUpgrade python-wcwidthUpgrade python-pytest-xdistUpgrade python-proliantutilsUpgrade futureUpgrade grpcUpgrade python-SecretStorageUpgrade python-fixturesUpgrade python-scciclientUpgrade python-keystonemiddlewareUpgrade openstack-ironicUpgrade tiniUpgrade python-itsdangerousUpgrade python-defusedxmlUpgrade python-neutronclientUpgrade python-tornadoUpgrade python-paste-deployUpgrade python-editorUpgrade python-oslo-metricsUpgrade haproxyUpgrade python-html5libUpgrade console-login-helper-messagesUpgrade python-statsdUpgrade python-openstacksdkUpgrade python-kiwisolverUpgrade pyflakesUpgrade python-kafkaUpgrade python-pyperclipUpgrade python-migrateUpgrade python-sortedcontainersUpgrade python-more-itertoolsUpgrade python-stevedoreUpgrade python-automatonUpgrade python-wraptUpgrade python-repoze-lruUpgrade python-munchUpgrade python-sushy-oem-idracUpgrade python-prometheus_clientUpgrade python-flake8Upgrade python-kerberosUpgrade python-funcsigsUpgrade python-webobUpgrade python-os-client-configUpgrade coreos-installerUpgrade kernel-rtUpgrade python-coverageUpgrade openvswitch2.17Upgrade container-selinuxUpgrade python-importlib-metadataUpgrade python-dataclassesUpgrade cri-toolsUpgrade python-typing-extensionsUpgrade python-requests-kerberosUpgrade python-pecanUpgrade python-oslo-contextUpgrade python-mimeparseUpgrade python-dogpile-cacheUpgrade python-routesUpgrade subunitUpgrade pyOpenSSLUpgrade cri-oUpgrade python-lockfileUpgrade python-pyrsistentUpgrade fuse-overlayfsUpgrade python-amqpUpgrade python-gunicornUpgrade libslirpUpgrade buildahUpgrade python-kombuUpgrade python-zeroconfUpgrade python-mccabeUpgrade python-keystoneclientUpgrade python-jsonschemaUpgrade python-requests-mockUpgrade python-wsmeUpgrade python-apipkgUpgrade python-hackingUpgrade openstack-ironic-inspectorUpgrade python-pretendUpgrade python-webencodingsUpgrade python-typeguardUpgrade python-ironic-libUpgrade python-caseUpgrade openstack-macrosUpgrade rust-afterburnUpgrade ansible-runner-httpUpgrade python-tempitaUpgrade python-pintUpgrade python-execnetUpgrade conmonUpgrade python-requests-unixsocketUpgrade python-packagingUpgrade python-ironic-prometheus-exporterUpgrade python-rsaUpgrade python-os-traitsUpgrade python-pytest-xprocessUpgrade python-noseUpgrade python-cinderclientUpgrade python-debtcollectorUpgrade python-mox3Upgrade python-hypothesisUpgrade python-virtualenvUpgrade python-oslo-middlewareUpgrade python-nose-cover3Upgrade python-distlibUpgrade python-greenletUpgrade python-soupsieveUpgrade python-glanceclientUpgrade python-beautifulsoup4Upgrade python-requestsexceptionsUpgrade python-werkzeugUpgrade python-sureUpgrade openshiftUpgrade python-voluptuousUpgrade python-flitUpgrade python-pycadfUpgrade python-coloramaUpgrade python-oslo-i18nUpgrade python-decoratorUpgrade python-betamaxUpgrade python-pymemcacheUpgrade python-oslo-serializationUpgrade python-os-service-typesUpgrade criuUpgrade python-jinja2Upgrade crunUpgrade ovn22.06Upgrade crudiniUpgrade python-osc-libUpgrade python-pycodestyleUpgrade python-singledispatchUpgrade python-waitressUpgrade python-zippUpgrade python-warlockUpgrade python-linecache2Upgrade python-ifaddrUpgrade openshift-ansibleUpgrade pysnmpUpgrade python-clickUpgrade python-geventUpgrade python-toozUpgrade python-cachetoolsUpgrade python-cliffUpgrade openshift-kuryrUpgrade python-oslo-reportsUpgrade python-oslotestUpgrade python-zope-interfaceUpgrade rust-bootupdUpgrade runcUpgrade rpm-ostreeUpgrade python-zope-testingUpgrade python-oslo-configUpgrade python-sqlparseUpgrade butaneUpgrade python-contextlib2Upgrade python-simplegenericUpgrade openstack-ironic-python-agentUpgrade python-pexpectUpgrade ovn22.09Upgrade ignitionUpgrade python-rfc3986Upgrade python-extrasUpgrade python-oslo-dbUpgrade python-monotonicUpgrade python-sushyUpgrade containers-commonUpgrade python-cmd2Upgrade python-memcachedUpgrade python-testtoolsUpgrade python-bcryptUpgrade conmon-rsUpgrade python-simplejsonUpgrade python-unittest2Upgrade toolboxUpgrade python-dracclientUpgrade python-vineUpgrade python-yappiUpgrade python-toxUpgrade python-freezegunUpgrade python-stestrUpgrade python-pasteUpgrade python-retryingUpgrade python-oslo-cacheUpgrade python-tenacityUpgrade python-webtestUpgrade python-filelockUpgrade python-pytest-covUpgrade python-testrepositoryUpgrade python-eventletUpgrade python-osprofilerUpgrade python-oslo-concurrencyUpgrade python-pyghmiUpgrade python-pycdlibUpgrade python-entrypointsUpgrade python-logutilsUpgrade podmanUpgrade python-constructUpgrade python-msgpackUpgrade python-zakeUpgrade python-keyringUpgrade python-autopageUpgrade openshift-clientsUpgrade python-pytest-forkedUpgrade atomic-openshift-service-idlerUpgrade python-oslo-utilsUpgrade ansible-runnerUpgrade python-hardwareUpgrade containernetworking-pluginsUpgrade python-redisUpgrade python-oslo-policyUpgrade python-iso8601Upgrade python-pytest-runnerUpgrade python-pyroute2Upgrade python-atomicwritesUpgrade python-fastenersUpgrade python-swiftclientUpgrade python-traceback2Upgrade python-keystoneauth1Upgrade python-testresourcesUpgrade nmstateUpgrade skopeo | Oct 16, 2023 | Jun 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub