CVE-2019-7615
1 advisory.
RubyGems/elastic-apm CVE-2019-7615: high 7.4, EPSS 0.64%
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
Action: Upgrade elastic-apm to 2.9.0 or later.
bundle update elastic-apmAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.0 | - |
Fixed versions
| 2.9.0 |
Sources
- osv: GHSA-35j2-p8fh-x966
- https://nvd.nist.gov/vuln/detail/CVE-2019-7615
- https://github.com/elastic/apm-agent-ruby/pull/449
- https://github.com/elastic/apm-agent-ruby
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/elastic-apm/CVE-2019-7615.yml
- https://www.elastic.co/community/security
CVE-2019-7615 · published · modified · JSON