whisper

whisper

RubyGemsRubyGems
RubyGemsrubygems.org
springnote.rubyforge.orgspringnote.rubyforge.org
Releases1
Last Release
Downloads5.69K
Whisper wrapper library for ruby
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2014-5808NVD↗
= 4.0.6—5.4 MEDIUM

The Whisper (aka sh.whisper) application 4.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.