CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1828

The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.4%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2015-1828

Http.rb Project » Http.rb » Version: 0.0.0

cpe:2.3:a:http.rb_project:http.rb:0.0.0
Http.rb Project » Http.rb » Version: 0.0.1

cpe:2.3:a:http.rb_project:http.rb:0.0.1
Http.rb Project » Http.rb » Version: 0.1.0

cpe:2.3:a:http.rb_project:http.rb:0.1.0
Http.rb Project » Http.rb » Version: 0.2.0

cpe:2.3:a:http.rb_project:http.rb:0.2.0
Http.rb Project » Http.rb » Version: 0.3.0

cpe:2.3:a:http.rb_project:http.rb:0.3.0
Http.rb Project » Http.rb » Version: 0.4.0

cpe:2.3:a:http.rb_project:http.rb:0.4.0
Http.rb Project » Http.rb » Version: 0.5.0

cpe:2.3:a:http.rb_project:http.rb:0.5.0
Http.rb Project » Http.rb » Version: 0.5.1

cpe:2.3:a:http.rb_project:http.rb:0.5.1
Http.rb Project » Http.rb » Version: 0.6.0

cpe:2.3:a:http.rb_project:http.rb:0.6.0
Http.rb Project » Http.rb » Version: 0.6.1

cpe:2.3:a:http.rb_project:http.rb:0.6.1
Http.rb Project » Http.rb » Version: 0.6.2

cpe:2.3:a:http.rb_project:http.rb:0.6.2
Http.rb Project » Http.rb » Version: 0.6.3

cpe:2.3:a:http.rb_project:http.rb:0.6.3
Http.rb Project » Http.rb » Version: 0.6.4

cpe:2.3:a:http.rb_project:http.rb:0.6.4
Http.rb Project » Http.rb » Version: 0.7.0

cpe:2.3:a:http.rb_project:http.rb:0.7.0
Http.rb Project » Http.rb » Version: 0.7.1

cpe:2.3:a:http.rb_project:http.rb:0.7.1
Http.rb Project » Http.rb » Version: 0.7.2

cpe:2.3:a:http.rb_project:http.rb:0.7.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1828

Products

Pricing

Contact Us