CVE-2014-0036

CVE-2014-0036 affects the rbovirt gem for Ruby, where versions before 0.0.24 use the rest-client library with SSL verification disabled, enabling remote attackers to perform MITM attacks via unspecified vectors. The vulnerability has a CVSS v2 base score of 6.8 (Network, Medium risk). Reported ac...

CVE-2014-0036: Undefined Security Weakness

The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors...

PT-2014-3444

Name of the Vulnerable Software and Affected Versions rbovirt gem versions prior to 0.0.24 Description The issue allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors, due to the use of the rest-client gem with SSL verification disabled. Recommendations For versions...

Fedora 19 : rubygem-rbovirt-0.0.18-4.fc19 (2014-3573)

Fix unsafe use of rest-client CVE-2014-0036. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client

The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors...