{"id":"CVE-2012-0861","aliases":["EUVD-2012-0886","GHSA-9gfq-v95v-9hrx","RHSA-2012:1505","RHSA-2012:1506","RHSA-2012:1508"],"status":"published","title":"The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a...","description":"The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.","severity":{"version":"2.0","score":6.8,"vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00895,"percentile":0.5975,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2013-01-04T22:00:00Z","modified":"2026-06-29T10:04:53Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","fixed_in":["0:6.3-20121121.0.el6_3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3-20121121.0.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-genericapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-notification-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-allinone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-tools-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-userportal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-32.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-44.0.el6_3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"vdsm-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-44.0.el6_3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"vdsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-44.0.el6_3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"vdsm-hook-vhostmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-44.0.el6_3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"vdsm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-44.0.el6_3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"vdsm-reg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-44.0.el6_3"}]}],"bundled":2}],"products":[{"vendor":"redhat","product":"enterprise_virtualization_manager"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-1508.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/56825","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1506.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1505.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80544","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securitytracker.com/id?1027838","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0861","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1505","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1506","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1508","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790754","tags":["report"]},{"url":"https://github.com/advisories/GHSA-9gfq-v95v-9hrx"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHBA-2012-1439.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHBA-2012-1500.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHBA-2012-1501.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHBA-2012-1507.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHBA-2012-1508.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHBA-2012-1510.html","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1505.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0861","tags":["advisory"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Technical_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=754876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=809814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=838300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=852057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=858643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=862370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875370","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1506.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0860","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0860","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2696","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2696","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5516","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5516","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=734847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=766281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=797526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=802759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=806625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=806757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=812793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=813423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=814435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=834008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=834105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=834205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=835478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=835784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=835900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=835920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=836161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=836562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=836954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=838347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=838547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=838802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=838924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=841863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=842115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=842146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=842338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=842662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=842771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=843076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=843387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=843498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=844180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=844294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=844347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=847518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=847733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=847744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=851146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=851839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=852989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=857112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=859109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=862002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=863265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=865386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876558","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1508.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-0861","description":"The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.","status":"published","published":"2013-01-04T22:00:00Z","modified":"2024-08-06T18:38:14.953Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0886","description":"The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.","status":"published","published":"2013-01-04T22:00:00Z","modified":"2024-08-06T18:38:14Z","updated_at":"2026-11-03T01:56:19.818597Z"}],"ghsa":[{"id":"GHSA-9gfq-v95v-9hrx","title":"The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a...","description":"The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.","status":"published","published":"2022-05-17T01:49:47Z","modified":"2023-02-02T18:30:28Z","updated_at":"2026-11-02T14:52:46.933473Z"}],"nvd":[{"id":"CVE-2012-0861","description":"The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.","status":"published","published":"2013-01-04T22:55:01.68Z","modified":"2026-06-16T23:38:24.303Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"RHSA-2012:1505","title":"Red Hat Security Advisory: rhev-hypervisor6 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T08:01:08Z","modified":"2026-06-29T10:04:52Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1506","title":"Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.1","status":"published","published":"2024-09-13T08:01:13Z","modified":"2026-06-29T10:04:52Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1508","title":"Red Hat Security Advisory: rhev-3.1.0 vdsm security, bug fix, and enhancement update","status":"published","published":"2024-09-13T08:01:19Z","modified":"2026-06-29T10:04:53Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}