CVE-2011-0738: MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) ho...

Security readout for executives and security teams

This flaw lets an attacker impersonate a MyProxy server because affected clients did not properly verify the server certificate hostname or identity. In practice, users running affected myproxy-logon or myproxy-get-delegation workflows could be exposed to man-in-the-middle attacks against credential-delegation activity. Exposure is most likely in legacy research, grid-computing, or HPC environments still running MyProxy 5.0-5.2 or Globus Toolkit 5.0.0-5.0.2. Modern environments are only in scope if these old components remain deployed. Treat this as a targeted legacy-risk issue. It is not listed as known exploited, but it affects authentication trust in credential-delegation workflows. Prioritize if your organization runs Globus or MyProxy in research, HPC, or grid infrastructure. Mitigation focus: Inventory MyProxy and Globus Toolkit versions across legacy systems.; Check Globus, MyProxy, and Fedora advisories for fixed packages or vendor guidance.; Upgrade or retire MyProxy 5.0-5.2 and Globus Toolkit 5.0.0-5.0.2 where present..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.