Skip to content
OpenAdvisories

Package · PyPI

apache-libcloud

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low —
    CVE-2013-6480 Public exploit

    Libcloud does not properly scrub data when destroying a DigitalOcean node

    Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.

    apache-libcloud PyPI
  • Medium 5.9
    CVE-2012-3446

    Apache Libcloud vulnerable to certificate impersonation

    Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta…

    apache-libcloud libcloud Debian PyPI
  • High 7.5
    CVE-2010-4340

    Apache Libcloud does not verify SSL certificates for HTTPS connections

    libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.

    apache-libcloud libcloud Debian PyPI