← Back

CVE-2017-17718

nvd nist
Published: Dec 17, 2017Modified: May 13, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

Affected (22)

Net Ldap Project
1 product
Net Ldap
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Net Ldap Project
Net Ldap
Version 0.0.5
Net Ldap
Version 0.1.0
Net Ldap
Version 0.1.1
Net Ldap
Version 0.10.0
Net Ldap
Version 0.10.1
Net Ldap
Version 0.11
Net Ldap
Version 0.12.0
Net Ldap
Version 0.12.1
Net Ldap
Version 0.13.0
Net Ldap
Version 0.14.0
Net Ldap
Version 0.15.0
Net Ldap
Version 0.2.1
Net Ldap
Version 0.2.2
Net Ldap
Version 0.2
Net Ldap
Version 0.3.0
Net Ldap
Version 0.3.1
Net Ldap
Version 0.5.1
Net Ldap
Version 0.6.0
Net Ldap
Version 0.6.1
Net Ldap
Version 0.7.0
Net Ldap
Version 0.8.0
Net Ldap
Version 0.9.0

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (6)

Source: cve@mitre.org
Issue TrackingMailing ListThird Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.