← All advisories

Medium severity5.9NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2014-8167

CVE-2014-8167

Description

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Red Hat/Enterprise Virtualization
cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*
Red Hat/vdsclient2 versions
cpe:2.3:a:redhat:vdsclient:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:vdsclient:-:*:*:*:*:*:*:*
- (no CPE)
Red Hat/Virtual Desktop Server Manager
cpe:2.3:a:redhat:virtual_desktop_server_manager:-:*:*:*:*:*:*:*
Red Hat/VDSMllm-fuzzy
vdsm and vdsclient/vdsm and vdsclientv5
Range: through 2014-11-18

Patches

Vulnerability mechanics

References

2

access.redhat.com/security/cve/cve-2014-8167nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.