Insecure SSL Verification in rbovirt Gem Allows Man-in-the-Middle Attacks

CVE-2014-0036

The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.

Learn more about our Web Application Penetration Testing UK.