VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 31, 2012· Updated Jun 16, 2026

CVE-2012-3533

CVE-2012-3533

Description

The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Ovirt/3105
    cpe:2.3:a:ovirt-engine-sdk:3.1.0.5:*:*:*:*:*:*:*:*
  • Ovirt/Ovirt2 versions
    cpe:2.3:a:ovirt:ovirt:3.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ovirt:ovirt:3.1:*:*:*:*:*:*:*
    • (no CPE)range: 3.1
  • Ovirt/Ovirt Engine CLI
    cpe:2.3:a:ovirt:ovirt-engine-cli:*:*:*:*:*:*:*:*
    Range: <=3.1.0.5

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.