vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_virtualization | Redhat | 3.0 (including) | 3.0 (including) |
| Vdsclient | Redhat | - (including) | - (including) |
| Virtual_desktop_server_manager | Redhat | - (including) | - (including) |