GHSA-ww79-8xwv-932x

Suggest an improvement
Source
https://github.com/advisories/GHSA-ww79-8xwv-932x
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/10/GHSA-ww79-8xwv-932x/GHSA-ww79-8xwv-932x.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-ww79-8xwv-932x
Aliases
  • CVE-2014-0036
Published
2017-10-24T18:33:36Z
Modified
2024-12-03T06:07:55Z
Summary
rbovirt uses the rest-client gem with SSL verification disabled
Details

The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.

Database specific 
{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2020-06-16T22:01:20Z",
    "nvd_published_at":  "2014-04-17T14:55:06Z",
    "severity":  "MODERATE"
}
References

Affected packages

RubyGems / rbovirt

Package

Name
rbovirt
Purl
pkg:gem/rbovirt

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.0.24

Affected versions

0.*
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.6
0.0.7
0.0.8
0.0.9
0.0.10
0.0.11
0.0.12
0.0.13
0.0.14
0.0.15
0.0.16
0.0.17
0.0.18
0.0.19
0.0.20
0.0.21
0.0.22
0.0.23

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/10/GHSA-ww79-8xwv-932x/GHSA-ww79-8xwv-932x.json"