{"action":"Upgrade python-glanceclient to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"python-glanceclient","cve_ids":["CVE-2013-4111"],"ecosystem":"PyPI","epss":0.00994,"exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-qgfg-gvff-523v","id":"tcs_01M5KFW28A2H8CCGBSXSG88KQ3","modified_at":"2024-10-25T21:01:56.298365Z","published_at":"2022-05-14T02:10:39Z","references":["https://osv.dev/vulnerability/GHSA-qgfg-gvff-523v","https://nvd.nist.gov/vuln/detail/CVE-2013-4111","https://access.redhat.com/errata/RHSA-2013:1200","https://access.redhat.com/security/cve/CVE-2013-4111","https://bugs.launchpad.net/ossa/+bug/1192229","https://bugzilla.redhat.com/show_bug.cgi?id=989738","https://github.com/jaypipes/python-glanceclient","https://github.com/openstack/python-glanceclient/blob/master/doc/source/index.rst","https://github.com/pypa/advisory-database/tree/main/vulns/python-glanceclient/PYSEC-2013-11.yaml","http://lists.opensuse.org/opensuse-updates/2013-08/msg00019.html","http://rhn.redhat.com/errata/RHSA-2013-1200.html","http://www.ubuntu.com/usn/USN-2004-1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qgfg-gvff-523v","url":"https://osv.dev/vulnerability/GHSA-qgfg-gvff-523v"}],"summary":"python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate"}