Approved changes feed: RSS · Atom

cpe:2.3:a:ovirt-engine-sdk-python_project:ovirt-engine-sdk-python:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOvirt Engine Sdk Python Project (4a00f6d7-4350-5e4d-94a3-4364cc561fd7)
ProductOvirt Engine Sdk Python (49a5d82d-940d-5664-94c9-3051427f6bcf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/pypi/ovirt-engine-sdk-python purl2cpe 2026-06-01 10:12:33.606379
pkg:github/mnecas/ovirt-engine-sdk-python purl2cpe 2026-06-01 10:12:33.606381
pkg:github/ovirt/ovirt-engine-sdk purl2cpe 2026-06-01 10:12:33.606382
pkg:github/ovirt/python-ovirt-engine-sdk4 purl2cpe 2026-06-01 10:12:33.606383
pkg:pypi/ovirt-engine-sdk-python purl2cpe 2026-06-01 10:12:33.606385
pkg:rpm/fedora/ovirt-engine-sdk-python purl2cpe 2026-06-01 10:12:33.606386

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0161 vulnerable 2026-06-08 05:05:11.921535 Details available
ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a TLS/SSL session. This could allow man-in-the-middle attackers to spoof remote endpoints via an arbitrary valid certificate.
Published: 2020-01-02T17:30:53.000Z
Updated: 2024-08-06T09:05:38.992Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.