Security Advisory

CVE-2012-0955

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-12-02 00:50:15

Last updated 2024-09-16 17:14:04

Assigner canonical

CVSS score 6.8

State PUBLISHED

Description

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.

← Browse all CVEs View on cve.org ↗