CVE-2021-28363 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-28363 Interim 1 72 2025-10-05T01:30:50Z current 2021-05-30T14:49:10Z 2025-10-05T01:30:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-28363 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Point of Service Image Server 12 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 python-urllib3 python2-urllib3 python3-urllib3 python-urllib3 as a component of HPE Helion OpenStack 8 python3-urllib3 as a component of HPE Helion OpenStack 8 python2-urllib3 as a component of SUSE CaaS Platform 4.0 python3-urllib3 as a component of SUSE CaaS Platform 4.0 python-urllib3 as a component of SUSE CaaS Platform 4.0 python-urllib3 as a component of SUSE Enterprise Storage 6 python-urllib3 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 python2-urllib3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python3-urllib3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python-urllib3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python2-urllib3 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS python3-urllib3 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS python-urllib3 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS python3-urllib3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python-urllib3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python-urllib3 as a component of SUSE Linux Enterprise Module for Public Cloud 12 python3-urllib3 as a component of SUSE Linux Enterprise Module for Public Cloud 12 python2-urllib3 as a component of SUSE Linux Enterprise Module for Python 2 15 SP2 python-urllib3 as a component of SUSE Linux Enterprise Module for Python 2 15 SP2 python-urllib3 as a component of SUSE Linux Enterprise Point of Service Image Server 12 SP2 python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP2-BCL python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP2-BCL python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server 12 SP5 python3-urllib3 as a component of SUSE Linux Enterprise Server 12 SP5 python2-urllib3 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python3-urllib3 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server 15-ESPOS python2-urllib3 as a component of SUSE Linux Enterprise Server 15-LTSS python3-urllib3 as a component of SUSE Linux Enterprise Server 15-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server 15-LTSS python-urllib3 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 python-urllib3 as a component of SUSE Linux Enterprise Server Teradata 12 SP3 python3-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python3-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python3-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python2-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 python3-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 python-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 python2-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python3-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python-urllib3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python3-urllib3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 python-urllib3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 python3-urllib3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 python-urllib3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 python-urllib3 as a component of SUSE Manager Proxy 4.0 python-urllib3 as a component of SUSE Manager Retail Branch Server 4.0 python-urllib3 as a component of SUSE Manager Server 4.0 python-urllib3 as a component of SUSE OpenStack Cloud 7 python3-urllib3 as a component of SUSE OpenStack Cloud 7 python-urllib3 as a component of SUSE OpenStack Cloud 8 python3-urllib3 as a component of SUSE OpenStack Cloud 8 python-urllib3 as a component of SUSE OpenStack Cloud 9 python3-urllib3 as a component of SUSE OpenStack Cloud 9 python-urllib3 as a component of SUSE OpenStack Cloud Crowbar 8 python3-urllib3 as a component of SUSE OpenStack Cloud Crowbar 8 python-urllib3 as a component of SUSE OpenStack Cloud Crowbar 9 python3-urllib3 as a component of SUSE OpenStack Cloud Crowbar 9 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted. CVE-2021-28363 HPE Helion OpenStack 8:python-urllib3 HPE Helion OpenStack 8:python3-urllib3 SUSE CaaS Platform 4.0:python-urllib3 SUSE CaaS Platform 4.0:python2-urllib3 SUSE CaaS Platform 4.0:python3-urllib3 SUSE Enterprise Storage 6:python-urllib3 SUSE Linux Enterprise High Performance Computing 12 SP5:python-urllib3 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python-urllib3 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python2-urllib3 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-urllib3 SUSE Linux Enterprise High Performance Computing 15-LTSS:python-urllib3 SUSE Linux Enterprise High Performance Computing 15-LTSS:python2-urllib3 SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-urllib3 SUSE Linux Enterprise Module for Basesystem 15 SP2:python-urllib3 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-urllib3 SUSE Linux Enterprise Module for Public Cloud 12:python-urllib3 SUSE Linux Enterprise Module for Public Cloud 12:python3-urllib3 SUSE Linux Enterprise Module for Python 2 15 SP2:python-urllib3 SUSE Linux Enterprise Module for Python 2 15 SP2:python2-urllib3 SUSE Linux Enterprise Point of Service Image Server 12 SP2:python-urllib3 SUSE Linux Enterprise Server 12 SP2-BCL:python-urllib3 SUSE Linux Enterprise Server 12 SP2-BCL:python3-urllib3 SUSE Linux Enterprise Server 12 SP2-ESPOS:python-urllib3 SUSE Linux Enterprise Server 12 SP2-ESPOS:python3-urllib3 SUSE Linux Enterprise Server 12 SP2-LTSS:python-urllib3 SUSE Linux Enterprise Server 12 SP2-LTSS:python3-urllib3 SUSE Linux Enterprise Server 12 SP3-BCL:python-urllib3 SUSE Linux Enterprise Server 12 SP3-BCL:python3-urllib3 SUSE Linux Enterprise Server 12 SP3-ESPOS:python-urllib3 SUSE Linux Enterprise Server 12 SP3-ESPOS:python3-urllib3 SUSE Linux Enterprise Server 12 SP3-LTSS:python-urllib3 SUSE Linux Enterprise Server 12 SP3-LTSS:python3-urllib3 SUSE Linux Enterprise Server 12 SP4-ESPOS:python-urllib3 SUSE Linux Enterprise Server 12 SP4-ESPOS:python3-urllib3 SUSE Linux Enterprise Server 12 SP4-LTSS:python-urllib3 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-urllib3 SUSE Linux Enterprise Server 12 SP5:python-urllib3 SUSE Linux Enterprise Server 12 SP5:python3-urllib3 SUSE Linux Enterprise Server 15 SP1-LTSS:python-urllib3 SUSE Linux Enterprise Server 15 SP1-LTSS:python2-urllib3 SUSE Linux Enterprise Server 15 SP1-LTSS:python3-urllib3 SUSE Linux Enterprise Server 15-ESPOS:python-urllib3 SUSE Linux Enterprise Server 15-LTSS:python-urllib3 SUSE Linux Enterprise Server 15-LTSS:python2-urllib3 SUSE Linux Enterprise Server 15-LTSS:python3-urllib3 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:python-urllib3 SUSE Linux Enterprise Server Teradata 12 SP3:python-urllib3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-urllib3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python3-urllib3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-urllib3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python3-urllib3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-urllib3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-urllib3 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-urllib3 SUSE Linux Enterprise Server for SAP Applications 15 SP1:python-urllib3 SUSE Linux Enterprise Server for SAP Applications 15 SP1:python2-urllib3 SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-urllib3 SUSE Linux Enterprise Server for SAP Applications 15:python-urllib3 SUSE Linux Enterprise Server for SAP Applications 15:python2-urllib3 SUSE Linux Enterprise Server for SAP Applications 15:python3-urllib3 SUSE Linux Enterprise Software Development Kit 12 SP5:python-urllib3 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-urllib3 SUSE Linux Enterprise Workstation Extension 12 SP5:python-urllib3 SUSE Linux Enterprise Workstation Extension 12 SP5:python3-urllib3 SUSE Manager Proxy 4.0:python-urllib3 SUSE Manager Retail Branch Server 4.0:python-urllib3 SUSE Manager Server 4.0:python-urllib3 SUSE OpenStack Cloud 7:python-urllib3 SUSE OpenStack Cloud 7:python3-urllib3 SUSE OpenStack Cloud 8:python-urllib3 SUSE OpenStack Cloud 8:python3-urllib3 SUSE OpenStack Cloud 9:python-urllib3 SUSE OpenStack Cloud 9:python3-urllib3 SUSE OpenStack Cloud Crowbar 8:python-urllib3 SUSE OpenStack Cloud Crowbar 8:python3-urllib3 SUSE OpenStack Cloud Crowbar 9:python-urllib3 SUSE OpenStack Cloud Crowbar 9:python3-urllib3 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N