~ / search / GHSA-rf3f-3p37-2qh4

GHSA-rf3f-3p37-2qh4

python-scciclient vulnerable to Man-in-the-middle (MITM) attacks

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-2996

Packages

EcosystemPackageAffectedFixed in
PyPI python-scciclient < 0.12.0 0.12.0

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

References

External links from the advisory. They lead to third-party sites.