CVE-2009-3552

In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAML browser application) to connect to the Red Hat Enterprise Virtualization Manager. An attacker on the local network could use this flaw to conduct a man-in-the-middle attack, tricking the user into thinking they are viewing the Red Hat Enterprise Virtualization Manager when the content is actually attacker-controlled, or modifying actions a user requested Red Hat Enterprise Virtualization Manager to perform.
References
Link Resource
https://access.redhat.com/security/cve/cve-2009-3552 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3552 Issue Tracking Third Party Advisory
https://www.securityfocus.com/bid/42639 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*

Information

Published : 2019-11-08 19:15

Updated : 2019-11-12 13:56


NVD link : CVE-2009-3552

Mitre link : CVE-2009-3552


JSON object : View

CWE
CWE-295

Improper Certificate Validation

Advertisement

dedicated server usa

Products Affected

redhat

  • enterprise_virtualization_manager