Net-ldap Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Net-ldap Project records in CISA KEV

No Net-ldap Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2017-12968 CVE-2017-17718 · GHSA-m7p8-9w66-9frm

LOW 29

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01348 Published 2017-12-17 Partial fix · 0.16.0 CWE-295

TI-2014-00078 CVE-2014-0083 · GHSA-qwgm-mxm4-3q2c

LOW 25

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00275 Published 2019-11-21 Fixed in 0.16.2 CWE-916