Ruby-lang Trunk

CPE Details

Ruby-lang Trunk
ruby-lang
trunk
-
2019-12-18
12h12 +00:00
2019-12-18
12h12 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ruby-lang:trunk:-:*:*:*:*:*:*:*

Informations

Vendor

ruby-lang

Product

trunk

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2015-1855 2019-11-29 19h46 +00:00 verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
5.9
Medium