CVE-2009-4123

The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-12-12

Last modified

2024-08-07

Weaknesses

CWE-295

Affected products

• Jruby-openssl (Jruby)

References

• http://jruby.org/2009/12/07/vulnerability-in-jruby-openssl
• https://github.com/advisories/GHSA-xgv7-pqqh-h2w9
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jruby-openssl/CVE-2009-4123.yml
• https://web.archive.org/web/20101213091125/http://jruby.org/2009/12/07/vulnerability-in-jruby-openssl