CVE-2012-3533

The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.

View graph Watch Export

CVSS v3.1

—

EPSS

1.07%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

4 relationships

CWE-310

source

Timeline

disclosure → media coverage

Aug 31, 2012

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026