CVE-2017-17718

rubygem-net-ldap: Missing SSL Certificate Validation

Published Dec 17, 2017 CVSS 3.0 · 5.9 Medium EPSS 1.3% KEV · Not listed
Description
The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-0161 The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.
Github GHSA Github GHSA GHSA-m7p8-9w66-9frm net-ldap Improper Certificate Validation vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 8:59 PM
Reserved
Dec 17, 2017, 12:00 AM
Status
Modified
Published
Dec 17, 2017, 9:29 PM
Modified
Jun 17, 2026, 1:11 AM
Severity
Moderate
Public date
Jan 14, 2016, 12:00 AM