Description

RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.

Remediation

References

CVE-2012-2126

Related Vulnerabilities

MySQL CVE-2020-2779 Vulnerability (CVE-2020-2779)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.8)

WordPress Plugin Slack-Chat Information Disclosure (1.5.5)

Ruby Integer Overflow or Wraparound Vulnerability (CVE-2008-2663)

Oracle Application Server Other Vulnerability (CVE-2007-0284)

Severity

Medium

Classification

CVE-2012-2126

Tags

Missing Update Known Vulnerabilities