Vulnerability Details CVE-2022-2996
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.0%
CVSS Severity
CVSS v3 Score 7.4
References
- https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html
- https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c
- https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html
- https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c
Products affected by CVE-2022-2996
-
cpe:2.3:a:python-scciclient_project:python-scciclient:0.11.0
-
cpe:2.3:o:debian:debian_linux:10.0