CVE-2012-3533
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL...
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
Exploit likelihood
What each source reports
NVD Score used
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
CVE-2012-3533- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE ListNo score
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
CVE-2012-3533- Updated
- 2026-11-02
EUVDEUVD-2012-3484No score
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
EUVD-2012-3484- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9rch-5m7j-5mjmNo score
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL...
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
- Record
GHSA-9rch-5m7j-5mjm- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3533 is a medium vulnerability (CVSS 5.0) in Ovirt, published August 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 65th percentile. No source names a fixed version.
References
securityfocus.com/bid/55208
openwall.com/lists/oss-security/2012/08/24/6
bugzilla.redhat.com/show_bug.cgi?id=851672
secunia.com/advisories/50409
exchange.xforce.ibmcloud.com/vulnerabilities/77984
gerrit.ovirt.org
nvd.nist.gov/vuln/detail/CVE-2012-3533
github.com/advisories/GHSA-9rch-5m7j-5mjm