Beveiligingsadvies

CVE-2011-4408

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-06-16 00:00:00
Laatst bijgewerkt 2024-08-07 00:09:18
Toegewezen door canonical
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.