Archive

1 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /1 November 2013 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium —

CVE-2012-2126

RubyGems does not verify SSL certificate

RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.

jruby rubygems rubygems-update Debian Ubuntu RubyGems

Oct 1, 2013
Medium —

CVE-2012-2125

RubyGems HTTPS to HTTP redirect

RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack.

jruby rubygems rubygems-update Debian Ubuntu RubyGems

Oct 1, 2013