https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:57:33 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2012-0861 <p>The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.</p> <p>The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2012-0861 https://vulnerability.circl.lu/vuln/ghsa-9gfq-v95v-9hrx <p>The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.</p> <p>The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.</p> https://vulnerability.circl.lu/vuln/ghsa-9gfq-v95v-9hrx https://vulnerability.circl.lu/vuln/gsd-2012-0861 gsd-2012-0861 https://vulnerability.circl.lu/vuln/gsd-2012-0861 https://vulnerability.circl.lu/vuln/rhsa-2012:1505 <p>rhev: vds_installer is prone to MITM when downloading 2nd stage installer</p> <p>rhev: vds_installer is prone to MITM when downloading 2nd stage installer</p> https://vulnerability.circl.lu/vuln/rhsa-2012:1505