PT-2018-7154 · Red Hat · Red Hat Virtualization+2
CVE-2017-2639
·
Publicado
2018-07-27
·
Atualizado
2023-02-12
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
CloudForms (affected versions not specified)
Description:
The issue arises from CloudForms not verifying that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This could allow an attacker to spoof RHEV or OpenShift systems, potentially leading to the harvesting of sensitive information from CloudForms.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Certificate Validation
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cloudforms
Openshift
Red Hat Virtualization