description: In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary SSL certificates.
problem types: no verification of remote SSL certificates
affected:
{
product: fence-agents
vendor: fence-agents
versions:
status: affected, version: before 4.0.17
}