CVE-2013-2191

Published: Feb 8, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20130619 [CVE identifier assignment notification] CVE-2013-2191 python-bugzilla: Does not verify Bugzilla server certificate

mailing-list

x_refsource_MLIST

openSUSE-SU-2013:1155

vendor-advisory

x_refsource_SUSE

https://git.fedorahosted.org/cgit/python-bugzilla.git/commit/?id=a782282ee479ba4cc1b8b1d89700ac630ba83eef

x_refsource_CONFIRM

openSUSE-SU-2013:1154

vendor-advisory

x_refsource_SUSE

https://bugzilla.redhat.com/show_bug.cgi?id=951594

x_refsource_CONFIRM

[python-bugzilla] 20130619 ANNOUNCE: python-bugzilla 0.9.0 released

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2013-2191

Description

Affected Products

References