mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
111 lines
3.4 KiB
JSON
111 lines
3.4 KiB
JSON
{
|
|
"id": "CVE-2010-4340",
|
|
"sourceIdentifier": "secalert@redhat.com",
|
|
"published": "2011-09-12T12:41:27.473",
|
|
"lastModified": "2023-11-07T02:06:19.807",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Las versiones de Libcloud antes de la v0.4.1 no verifican los certificados SSL para conexiones HTTPS, lo que permite a atacantes remotos falsificar certificados y eludir las restricciones de acceso a trav\u00e9s de un ataque de hombre en el medio (MITM)."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 4.3
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 2.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-264"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:libcloud:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "0.4.0",
|
|
"matchCriteriaId": "38B0947F-E9E0-4E8C-901D-FAB7A22B3A6A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:libcloud:0.2.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "711C1876-35C7-4153-B344-1D461E6BED80"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:libcloud:0.3.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "12AD59FE-8AD1-41C5-B9AC-F51EA7E07086"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:libcloud:0.3.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "15A06412-37E3-471A-B022-C1B8D3C5B7F0"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598463",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://mail-archives.apache.org/mod_mbox/incubator-libcloud/201009.mbox/%3C5860913.463891285776633273.JavaMail.jira%40thor%3E",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://mail-archives.apache.org/mod_mbox/incubator-libcloud/201011.mbox/browser",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://wiki.apache.org/incubator/LibcloudSSL",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "https://issues.apache.org/jira/browse/LIBCLOUD-55",
|
|
"source": "secalert@redhat.com"
|
|
}
|
|
]
|
|
} |