Net-Ldap Project Net-Ldap vulnerabilities
2 known vulnerabilities affecting net-ldap_project/net-ldap.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2017-17718P4MEDIUMCVSS 5.9v0.0.5v0.1.0+20 more2017-12-17
CVE-2017-17718 [MEDIUM] CWE-295 CVE-2017-17718: The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.
The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.
ghsanvdosv
CVE-2014-0083P4MEDIUMCVSS 5.5fixed in 0.16.22019-11-21
CVE-2014-0083 [MEDIUM] CWE-916 CVE-2014-0083: The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.
ghsanvdosv