CVE-2017-17718.yml

---
gem: net-ldap
cve: 2017-17718
ghsa: m7p8-9w66-9frm
url: https://github.com/ruby-ldap/ruby-net-ldap/issues/258
title: No validation of hostname certificate in net-ldap
date: 2017-12-17
description: |
  The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL
  Certificate Validation. The LDAP server's certificate was not verified
  to match the host it was supposed to be connecting to.
cvss_v3: 5.9
patched_versions:
  - ">= 0.16.0"
related:
  url:
    - https://github.com/ruby-ldap/ruby-net-ldap/pull/279
    - https://github.com/ruby-ldap/ruby-net-ldap/commit/e4c46a223a19feda78393a793711353aa1febdcd