Skip to content
OpenAdvisories

Package · Debian

ruby-oauth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2016-11086

    Improper Certificate Validation in oauth ruby gem

    lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

    oauth ruby-oauth ruby-oauth Debian Ubuntu RubyGems