CVE-2012-2126

Опубликовано: 01 окт. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:*

Версия до 1.8.22 (включая)

cpe:2.3:a:rubygems:rubygems:1.8.0:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.1:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.2:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.3:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.4:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.5:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.6:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.7:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.8:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.9:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.10:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.11:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.12:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.13:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.14:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.15:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.16:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.17:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.18:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.19:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.20:*:*:*:*:*:*:*

cpe:2.3:a:rubygems:rubygems:1.8.21:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:redhat:openshift:1.2.2:*:*:*:enterprise:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*

EPSS

Процентиль: 50%

0.00272

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2012-2126

ubuntu

больше 11 лет назад

RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.

CVE-2012-2126

redhat

около 13 лет назад

RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.

CVE-2012-2126

debian

больше 11 лет назад

RubyGems before 1.8.23 does not verify an SSL certificate, which allow ...

GHSA-5mgj-mvv8-46mw

github

около 3 лет назад

RubyGems does not verify SSL certificate

ELSA-2013-1441

oracle-oval

больше 11 лет назад

ELSA-2013-1441: rubygems security update (MODERATE)

EPSS

Процентиль: 50%

0.00272

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310