Security Advisory

CVE-2017-2639

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-27 13:00:00

Last updated 2024-08-05 14:02:06

Assigner redhat

CVSS score 6.5

State PUBLISHED

Description

It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.

← Browse all CVEs View on cve.org ↗