Libcloud (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 71 known versions, newest CVE from 2014-01-07. Vendor: Apache.

CVEs of Libcloud

• CVE-2013-6480 - CVSS 2.1 (low), 2014-01-07: Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive…
• CVE-2012-3446 - CVSS 5.9 (medium), 2012-11-04: Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's…
• CVE-2010-4340 - CVSS 4.3 (medium), 2011-09-12: libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access…