RFC 6125 violation vulnerability in OpenSSL extension in RubyID: oval:org.secpod.oval:def:25173 | Date: (C)2015-06-23 (M)2024-02-19 |
Class: VULNERABILITY | Family: unix |
The host is installed with ruby on Red Hat Enterprise Linux 5, 6 or 7 and is prone to a RFC 6125 violation vulnerability. A flaw is present in the application, which fails to properly verify host names against X.509 certificate names with wildcards. Successful exploitation could cause Ruby TLS/SSL clients to accept certain certificates as valid against RFC 6125 recommendations.
Platform: |
Red Hat Enterprise Linux 5 |
Red Hat Enterprise Linux 6 |
Red Hat Enterprise Linux 7 |