CVE-2012-0861

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization Manager (RHEV-M) versions prior to 3.1

Description The issue concerns the use of the -k curl parameter by the vds installer when adding a host, which prevents SSL certificates from being validated. This allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.

Recommendations For versions prior to 3.1, update to version 3.1 or later to resolve the issue.