VYPR
← All advisories
High severityNVD Advisory· Published Sep 12, 2011· Updated Jun 16, 2026

CVE-2010-4340

CVE-2010-4340

Description

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
apache-libcloudPyPI
< 0.4.00.4.0

Affected products

5
  • Apache/Libcloud4 versions
    cpe:2.3:a:apache:libcloud:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:apache:libcloud:*:*:*:*:*:*:*:*range: <=0.4.0
    • cpe:2.3:a:apache:libcloud:0.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:libcloud:0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:libcloud:0.3.1:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:pypi/apache-libcloud
    Range: < 0.4.0

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.