CVE-2012-0861

CVE-2012-0861 describes a critical vulnerability in Red Hat Enterprise Virtualization Manager (RHEV-M) before version 3.1, where the vds_installer fails to validate SSL certificates during host addition. This flaw allows a remote attacker to execute arbitrary Python code through a man-in-the-middle (MITM) attack by exploiting the insecure download of deployUtil.py and vds_bootstrap.py. With a CVSS score of 6.8 (Medium), this vulnerability has a network attack vector and high attack complexity, but could lead to complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). The EPSS score is low, indicating a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor are there any publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting a low level of public awareness or interest.