SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2013-6418

PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.8
Exploit Score: 8.6
Impact Score: 4.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: NONE

Reference:

SECUNIA-58327

BID-64544

SUSE-SU-2014:0580

http://seclists.org/oss-sec/2013/q4/531

http://sourceforge.net/p/pywbem/mailman/message/31757312/

http://sourceforge.net/p/pywbem/code/627/

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

https://bugzilla.redhat.com/show_bug.cgi?id=1039801


30479



423868



249461



909



195508



282