CVE-2012-2126: Medium severity rubygems vulnerability
Published Apr 19, 2012
·Updated
RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.
Affected Software
30 affected componentsFixes available
rubygems/rubygems-update<1.8.23
1.8.23
redhat/rubygems<0:1.3.7-4.el6_4
0:1.3.7-4.el6_4
redhat/cumin<0:0.1.5787-4.el6
0:0.1.5787-4.el6
redhat/rubygems<0:1.8.23.2-1.el6
0:1.8.23.2-1.el6
redhat/rubygems<0:1.8.24-4.el6
0:1.8.24-4.el6
Rubygems RubyGems<=1.8.22
Rubygems RubyGems=1.8.0
Rubygems RubyGems=1.8.1
Rubygems RubyGems=1.8.2
Rubygems RubyGems=1.8.3
Rubygems RubyGems=1.8.4
Rubygems RubyGems=1.8.5
Rubygems RubyGems=1.8.6
Rubygems RubyGems=1.8.7
Rubygems RubyGems=1.8.8
Rubygems RubyGems=1.8.9
Rubygems RubyGems=1.8.10
Rubygems RubyGems=1.8.11
Rubygems RubyGems=1.8.12
Rubygems RubyGems=1.8.13
Rubygems RubyGems=1.8.14
Rubygems RubyGems=1.8.15
Rubygems RubyGems=1.8.16
Rubygems RubyGems=1.8.17
Rubygems RubyGems=1.8.18
Rubygems RubyGems=1.8.19
Rubygems RubyGems=1.8.20
Rubygems RubyGems=1.8.21
redhat Openshift=1.2.2
Canonical Ubuntu Linux=12.04
Remediation
Patch Available
Event History
Apr 19, 2012
CVE Published
12:00 AM
Oct 1, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
May 17, 2022
Advisory Published
04:54 AM
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is the severity of CVE-2012-2126?
CVE-2012-2126 is considered a critical vulnerability due to its potential for man-in-the-middle attacks.
2
How do I fix CVE-2012-2126?
To fix CVE-2012-2126, upgrade RubyGems to version 1.8.23 or later.
3
What versions of RubyGems are affected by CVE-2012-2126?
RubyGems versions prior to 1.8.23 are affected by CVE-2012-2126.
4
Can CVE-2012-2126 allow unauthorized access to my system?
Yes, CVE-2012-2126 could allow unauthorized modification of a gem during installation.
5
Is CVE-2012-2126 a localized issue?
No, CVE-2012-2126 can be exploited remotely, making it a widespread concern.