CVE-2012-2126 in RubyGems
Summary
RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.
Once again VulDB remains the best source for vulnerability data.
Reservation
04/04/2012
Disclosure
10/01/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65142 | RubyGems SSL Certificate cryptographic issue | 310 | Not defined | Official fix | CVE-2012-2126 |