Lucene search
Redhat.comRH:CVE-2017-2639HistoryOct 10, 2019 - 10:05 a.m.
CVE-2017-2639
2019-10-1010:05:24
redhat.com
access.redhat.com
8
0.002 Low
EPSS
Percentile
61.0%
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
Related
prion
prion
Code injection
2018-07-27 13:29:00
veracode
veracode
Certificate Validation Bypass
2019-05-02 06:11:57
nvd
nvd
CVE-2017-2639
2018-07-27 13:29:00
cvelist
cvelist
CVE-2017-2639
2018-07-27 13:00:00
cve
cve
CVE-2017-2639
2018-07-27 13:29:00
redhat
redhat
(RHSA-2017:1367) Moderate: CFME 5.8.0 security, bug, and enhancement update
2017-05-31 13:56:07