Contents

---
gem: rubygems-update
library: rubygems
cve: 2012-2126
osvdb: 81444
url: https://nvd.nist.gov/vuln/detail/CVE-2012-2126
title: RubyGems SSL Certificate Validation MitM Spoofing Weakness
date: 2012-04-20
description: |
  RubyGems contains a flaw related to the validation of SSL certificates when
  accessing certain services and APIs. This may allow a man-in-the-middle
  attacker to spoof a valid server.
cvss_v2: 4.3
patched_versions:
  - ">= 1.8.23"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/rubygems-update/CVE-2012-2126.yml