What is GHSA-rf3f-3p37-2qh4?

GHSA-rf3f-3p37-2qh4 is a security advisory published by GitHub Security Advisories with Critical severity. python-scciclient vulnerable to Man-in-the-middle (MITM) attacks

Which CVE IDs does GHSA-rf3f-3p37-2qh4 cover?

GHSA-rf3f-3p37-2qh4 covers the following CVE IDs: CVE-2022-2996. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rf3f-3p37-2qh4?

GHSA-rf3f-3p37-2qh4 has a CVSS v3 base score of 7.4, published by GitHub Security Advisories.

Which products are affected by GHSA-rf3f-3p37-2qh4?

GHSA-rf3f-3p37-2qh4 affects 1 product, including: pip/python-scciclient:\u003c 0.12.0.

GHSA-rf3f-3p37-2qh4CriticalCVSS 7.4

python-scciclient vulnerable to Man-in-the-middle (MITM) attacks

Vendor

GitHub Security Advisories

Published

September 2, 2022

Last Modified

November 26, 2024

🔗 CVE IDs covered (1)

CVE-2022-2996 →

📋 Description

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

🎯 Affected products1

pip/python-scciclient:< 0.12.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-2996
https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c
https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html
https://github.com/pypa/advisory-database/tree/main/vulns/python-scciclient/PYSEC-2022-43152.yaml
https://github.com/advisories/GHSA-rf3f-3p37-2qh4