CVE-2019-7615

A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'servercacert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the...

CVE-2019-7615

CVE-2019-7615 affects Elastic APM agent for Ruby prior to version 2.9.0. The flaw occurs when a trusted server CA is configured via server_ca_cert, where the agent fails to properly verify the APM server’s certificate, enabling potential MITM attacks. Affected component: Ruby agent’s TLS certific...