CVEvulnerability

CVE-2014-0036

6.8 MEDIUM Published 2014-04-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-310

Description

The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.

Affected configurations

• amos benari rbovirt (<= 0.0.23) • amos benari rbovirt 0.0.1 • amos benari rbovirt 0.0.2 • amos benari rbovirt 0.0.3 • amos benari rbovirt 0.0.4 • amos benari rbovirt 0.0.5 • amos benari rbovirt 0.0.6 • amos benari rbovirt 0.0.7 • amos benari rbovirt 0.0.8 • amos benari rbovirt 0.0.9 • amos benari rbovirt 0.0.10 • amos benari rbovirt 0.0.11 • amos benari rbovirt 0.0.12 • amos benari rbovirt 0.0.13 • amos benari rbovirt 0.0.14 • amos benari rbovirt 0.0.15 • amos benari rbovirt 0.0.16 • amos benari rbovirt 0.0.17 • amos benari rbovirt 0.0.18 • amos benari rbovirt 0.0.19 • amos benari rbovirt 0.0.20 • amos benari rbovirt 0.0.21 • amos benari rbovirt 0.0.22

Related

Weakness · not in database (1)

References