CVE-2014-8167 vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
MediumCVSS 5.9
EPSS 0.73%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise virtualization | = 3.0 | No fix listed |
| redhat vdsclient | All versions | No fix listed |
| redhat virtual desktop server manager | All versions | No fix listed |
| vdsm and vdsclient | = through 2014-11-18 | No fix listed |
References
- access.redhat.com third-party-advisory
- Red Hat issue-tracking third-party-advisory vendor-advisory