Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:58:47 +0000 BREW-ansible-CVE-2015-3908 — Ansible does not verify that the server hostname matches a domain name in certificates https://cve.radiocsirt.org/vuln/brew-ansible-cve-2015-3908 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2015-3908 cnvd-2015-04828 https://cve.radiocsirt.org/vuln/cnvd-2015-04828 cnvd-2015-04828 https://cve.radiocsirt.org/vuln/cnvd-2015-04828 EUVD-2026-92181 https://cve.radiocsirt.org/vuln/euvd-2026-92181 EUVD-2026-92181 https://cve.radiocsirt.org/vuln/euvd-2026-92181 fkie_cve-2015-3908 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3908 <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3908 GHSA-w64c-pxjj-h866 — Ansible does not verify that the server hostname matches a domain name in certificates https://cve.radiocsirt.org/vuln/ghsa-w64c-pxjj-h866 <p><strong>Affected:</strong> PyPI: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-w64c-pxjj-h866 gsd-2015-3908 https://cve.radiocsirt.org/vuln/gsd-2015-3908 gsd-2015-3908 https://cve.radiocsirt.org/vuln/gsd-2015-3908 openSUSE-SU-2024:10326-1 — ansible-2.2.0.0-1.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:10326-1 <p>ansible-2.2.0.0-1.1 on GA media</p> <p>ansible-2.2.0.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10326-1 PYSEC-2015-1 https://cve.radiocsirt.org/vuln/pysec-2015-1 <p><strong>Affected:</strong> PyPI: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/pysec-2015-1 UBUNTU-CVE-2015-3908 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3908 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ansible</p> <p>Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3908