The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ovirt | Ovirt | 3.1 (including) | 3.1 (including) |
| Ovirt-engine-cli | Ovirt | * | 3.1.0.5 (including) |
| 3.1.0.5 | Ovirt-engine-sdk | * | * |