En bref
- CVE-2022-2996 est une vulnérabilité ÉLEVÉE (CVSS 7.4) touchant python-scciclient, python-scciclient (python-scciclient project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.66%, plus élevée que 51.9% des vulnérabilités.
- Correctif : mettre à jour vers 0.12.0 ou plus récent.
Description
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
NVD description
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free