Description
vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vdsm and vdsclient | vdsm and vdsclient | through 2014-11-18 | — |
References
- https://access.redhat.com/security/cve/cve-2014-8167
- Red Hat vendor-advisory