Red Hat Security Advisory

RHSA-2021:0937

rubygem-em-http-request security update

Released 2021-03-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 Operational Tools for RHEL 7 rubygem-em-http-request-1.1.5-4.el7ost

Fixes 1 record

TI-2020-10572 CVE-2020-13482 · GHSA-q27f-v3r6-9v77

EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an…

LOW 34

EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00928 Published 2020-05-25 Fixed in 1.1.6 CWE-295