CVE-2022-2996

Advisory

Python-scciclient 0.12.0 includes a fix for CVE-2022-2996: A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks. See CVE-2022-2996.


MISC:https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c: https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c

Resources

• https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2996
• https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html