CVE-2010-4340: Apache Libcloud

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.

Affected products

• Apache Libcloud: up to and including 0.4.0; version 0.2.0 only; version 0.3.0 only; version 0.3.1 only

Published 2011-09-12. Last modified 2026-06-16.