Lucene search
Veracode Vulnerability DatabaseVERACODE:20933HistoryJul 31, 2019 - 4:33 a.m.
Man-in-the-Middle (MitM)
2019-07-3104:33:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.001
Percentile
37.0%
elastic-apm is vulnerable to man-in-the-middle (MitM) attacks. When specifying a trusted server CA certificate via the server_ca_cert setting, a TLS certificate validation error causes improper verification of the certificate returned by the APM server. This allows an attacker to perform man-in-the-middle attacks against the Ruby agent.
Related
osv
osv
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
2022-05-24 16:51:49
CVE-2019-7615
2019-07-30 22:15:12
github
github
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
2022-05-24 16:51:49
cvelist
cvelist
CVE-2019-7615
2019-07-30 21:15:47
rubygems
rubygems
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
2022-05-23 21:00:00
nvd
nvd
CVE-2019-7615
2019-07-30 22:15:12
cve
cve
CVE-2019-7615
2019-07-30 22:15:12
prion
prion
Design/Logic Flaw
2019-07-30 22:15:00