Apache Software Foundation libcloud 0.4.0

CPE Details

Apache Software Foundation libcloud 0.4.0
apache
libcloud
0.4.0
2011-09-12
14h22 +00:00
2012-11-13
17h58 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:apache:libcloud:0.4.0:*:*:*:*:*:*:*

Informations

Vendor

apache

Product

libcloud

Version

0.4.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2012-3446 2012-11-04 22h00 +00:00 Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
5.9
Medium
CVE-2010-4340 2011-09-11 20h00 +00:00 libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.
4.3