CVE-2012-3533
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL...
CVE-2012-3533 is a medium vulnerability (CVSS 5.0) in Ovirt, published August 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 64th percentile. No source names a fixed version.
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
Exploit likelihood
What each source reports
NVD Score used
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
CVE-2012-3533- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
CVE-2012-3533- Updated
- 2026-11-02
EUVDEUVD-2012-3484 No score
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
EUVD-2012-3484- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9rch-5m7j-5mjm No score
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL...
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
GHSA-9rch-5m7j-5mjm- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
securityfocus.com/bid/55208
openwall.com/lists/oss-security/2012/08/24/6
bugzilla.redhat.com/show_bug.cgi?id=851672
secunia.com/advisories/50409
exchange.xforce.ibmcloud.com/vulnerabilities/77984
gerrit.ovirt.org
nvd.nist.gov/vuln/detail/CVE-2012-3533
github.com/advisories/GHSA-9rch-5m7j-5mjm