high7.5
CVE-2009-4123
The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
Impact
The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jruby | Jruby-Openssl | before 0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jruby.org/2009/12/07/vulnerability-in-jruby-openssl
- https://github.com/advisories/GHSA-xgv7-pqqh-h2w9
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jruby-openssl/CVE-2009-4123.yml
- https://web.archive.org/web/20101213091125/http://jruby.org/2009/12/07/vulnerability-in-jruby-openssl
- http://jruby.org/2009/12/07/vulnerability-in-jruby-openssl
- https://github.com/advisories/GHSA-xgv7-pqqh-h2w9
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jruby-openssl/CVE-2009-4123.yml
- https://web.archive.org/web/20101213091125/http://jruby.org/2009/12/07/vulnerability-in-jruby-openssl