{"action":"Upgrade rbovirt to 0.0.24 or later.","affected":[{"fixed":"0.0.24","introduced":"0"}],"component":"rbovirt","cve_ids":["CVE-2014-0036"],"ecosystem":"RubyGems","epss":0.01968,"exploited":false,"fixed_versions":["0.0.24"],"ghsa_id":"GHSA-ww79-8xwv-932x","id":"tcs_01M5KEP1M1JA4XZ3ZV8T6FPDFY","modified_at":"2024-12-03T06:07:55.246020Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-ww79-8xwv-932x","https://nvd.nist.gov/vuln/detail/CVE-2014-0036","https://bugzilla.redhat.com/show_bug.cgi?id=1058595","https://github.com/abenari/rbovirt","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rbovirt/CVE-2014-0036.yml","http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130148.html","http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130180.html","http://seclists.org/oss-sec/2014/q1/509"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-ww79-8xwv-932x","url":"https://osv.dev/vulnerability/GHSA-ww79-8xwv-932x"}],"summary":"rbovirt uses the rest-client gem with SSL verification disabled"}