Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-2126
4.3
MEDIUMCVSS v2
Published
October 1, 2013
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.
ruby/rubygems
GitHubLibrary packaging and distribution for Ruby.
GitHubLibrary packaging and distribution for Ruby.<= 1.8.22, = 1.8.0, = 1.8.1, = 1.8.2, = 1.8.3, = 1.8.4, = 1.8.5, = 1.8.6, = 1.8.7, = 1.8.8, = 1.8.9, = 1.8.10, = 1.8.11, = 1.8.12, = 1.8.13, = 1.8.14, = 1.8.15, = 1.8.16, = 1.8.17, = 1.8.18, = 1.8.19, = 1.8.20, = 1.8.21NVD