NetSight
IP …
medium4.3

CVE-2010-4340

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access re…

Impact

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.

Affected products

VendorProductAffected versions
ApacheLibcloud
through 0.4.0
Versions 0.2.0, 0.3.0, 0.3.1

Weakness classification

CWE-264

References