debian/python-glanceclient vulnerabilities

Latest debian/python-glanceclient CVEs

Newest publication first

1. CVE-2013-4111 python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate

   Published 2013-08-28

   Medium·CVSS 5.8

   The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.