← Back

Oauth Ruby

oauth-ruby

Vendor: Oauth Ruby Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-11086
1Oauth Ruby Project
1Oauth Ruby
Nov 21, 2024
Sep 24, 2020
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain s...Show more
lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.Show less