CVE-2010-4340

Published: Sep 12, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.

Affected (4)

Products: Apache: Libcloud

Apache

1 product

Libcloud

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apache Libcloud	Up to 0.4.0
Apache Libcloud	Version 0.2.0
Apache Libcloud	Version 0.3.0
Apache Libcloud	Version 0.3.1

Related CWEs

CWE-264

References (10)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598463

Source: secalert@redhat.com

http://mail-archives.apache.org/mod_mbox/incubator-libcloud/201009.mbox/%3C5860913.463891285776633273.JavaMail.jira%40thor%3E

Source: secalert@redhat.com

http://mail-archives.apache.org/mod_mbox/incubator-libcloud/201011.mbox/browser

Source: secalert@redhat.com

http://wiki.apache.org/incubator/LibcloudSSL

Source: secalert@redhat.com

https://issues.apache.org/jira/browse/LIBCLOUD-55

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598463