Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-2996

Опубликовано: 01 сент. 2022
Источник: ubuntu
Приоритет: medium
CVSS3: 7.4

Описание

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

kinetic

ignored

end of life, was needs-triage

Показывать по

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
redhat
больше 3 лет назад

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

CVSS3: 7.4
nvd
больше 3 лет назад

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

CVSS3: 7.4
debian
больше 3 лет назад

A flaw was found in the python-scciclient when making an HTTPS connect ...

CVSS3: 7.4
github
больше 3 лет назад

python-scciclient vulnerable to Man-in-the-middle (MITM) attacks

7.4 High

CVSS3