Описание
http vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.
Пакеты
Наименование
http
rubygems
Затронутые версииВерсия исправления
< 0.7.3
0.7.3
Связанные уязвимости
CVSS3: 5.9
ubuntu
больше 8 лет назад
The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.
CVSS3: 5.9
nvd
больше 8 лет назад
The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.
CVSS3: 5.9
debian
больше 8 лет назад
The Ruby http gem before 0.7.3 does not verify hostnames in SSL connec ...