CVE-2011-4408

Name of the Vulnerable Software and Affected Versions Ubuntu Single Sign On Client versions 11.04 through 11.10

Description The issue allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack due to improper validation of SSL certificates when using HTTPS.

Recommendations For Ubuntu Single Sign On Client versions 11.04 through 11.10, consider disabling HTTPS until a proper fix is applied to ensure SSL certificates are validated correctly.