medium6.8
CVE-2014-0036
The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle atta…
Impact
The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amos Benari | Rbovirt | through 0.0.23 Versions 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130148.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130180.html
- http://seclists.org/oss-sec/2014/q1/509
- https://bugzilla.redhat.com/show_bug.cgi?id=1058595
- http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130148.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130180.html
- http://seclists.org/oss-sec/2014/q1/509
- https://bugzilla.redhat.com/show_bug.cgi?id=1058595