Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2012-3446

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-prcq-52f8-fp44

Apache Libcloud vulnerable to certificate impersonation Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

gitlab/pypi/apache-libcloud/CVE-2012-3446

Improper Input Validation Apache Libcloud uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.