What’s Vulnerable › Vulnerabilities

CVE-2022-2996

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-01 · updated 2026-06-17
• Weakness: CWE-295

Description

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.

Affected products

• Debian Linux: 10.0
• Python-Scciclient Project Python-Scciclient: 0.11.0

References

• https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html
• https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c
• https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html
• https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c

Get alerted when CVE-2022-2996 or the next vulnerability affects your stack