CVE-2009-3552

CVE-2009-3552 describes a vulnerability in Red Hat Enterprise Virtualization Manager (RHEV-M) VDC 2.2.0, where the client-side interface failed to verify SSL certificates when connecting to the manager. This flaw allowed a local network attacker to perform a man-in-the-middle attack, potentially spoofing the manager or altering user actions. The vulnerability has a CVSS 3.1 score of Low (3.1), indicating a low impact on integrity with high attack complexity and requiring adjacent network access. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.