What is GHSA-m7p8-9w66-9frm?

GHSA-m7p8-9w66-9frm is a security advisory published by GitHub Security Advisories with Medium severity. net-ldap Improper Certificate Validation vulnerability

Which CVE IDs does GHSA-m7p8-9w66-9frm cover?

GHSA-m7p8-9w66-9frm covers the following CVE IDs: CVE-2017-17718. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m7p8-9w66-9frm?

GHSA-m7p8-9w66-9frm has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

Which products are affected by GHSA-m7p8-9w66-9frm?

GHSA-m7p8-9w66-9frm affects 1 product, including: rubygems/net-ldap:\u003c 0.16.0.

GHSA-m7p8-9w66-9frmMediumCVSS 5.9

net-ldap Improper Certificate Validation vulnerability

Vendor

GitHub Security Advisories

Published

January 6, 2018

Last Modified

January 31, 2023

🔗 CVE IDs covered (1)

CVE-2017-17718 →

📋 Description

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

🎯 Affected products1

rubygems/net-ldap:< 0.16.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2017-17718
https://github.com/ruby-ldap/ruby-net-ldap/issues/258
https://github.com/ruby-ldap/ruby-net-ldap/pull/279
http://openwall.com/lists/oss-security/2017/12/17/10
https://github.com/advisories/GHSA-m7p8-9w66-9frm