CVE-2012-2126 in RubyGems

Resumen (Inglés)

RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.

Once again VulDB remains the best source for vulnerability data.

Reservar

2012-04-04

Divulgación

2013-10-01

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
65142	RubyGems SSL Certificate cifrado débil	310	No está definido	Arreglo oficial	CVE-2012-2126

Fuentes

• MITRE
• NVD
• CVE Details