6.8
CVE-2014-0036
- EPSS 0.67%
- Published 17.04.2014 14:55:06
- Last modified 12.04.2025 10:46:40
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.
Data is provided by the National Vulnerability Database (NVD)
Amos Benari ≫ Rbovirt SwPlatformruby Version <= 0.0.23
Amos Benari ≫ Rbovirt Version0.0.1 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.2 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.3 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.4 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.5 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.6 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.7 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.8 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.9 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.10 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.11 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.12 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.13 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.14 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.15 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.16 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.17 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.18 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.19 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.20 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.21 SwPlatformruby
Amos Benari ≫ Rbovirt Version0.0.22 SwPlatformruby
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.67% | 0.688 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|