The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors.
http://www.vupen.com/english/advisories/2008/2397
http://www.securityfocus.com/bid/30694
http://secunia.com/advisories/31429
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html