CVE-2019-7615: High severity elastic apm agent (ruby) vulnerability
A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'servercacert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the middle style attack against the Ruby agent.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-7615?
CVE-2019-7615 is classified as a medium severity vulnerability due to its potential for exploitation in a man-in-the-middle attack.
How do I fix CVE-2019-7615?
To fix CVE-2019-7615, upgrade the Elastic APM agent for Ruby to version 2.9.0 or later.
What versions are affected by CVE-2019-7615?
CVE-2019-7615 affects all versions of the Elastic APM agent for Ruby prior to 2.9.0.
What exploitation can occur due to CVE-2019-7615?
If exploited, CVE-2019-7615 can allow an attacker to perform man-in-the-middle attacks by bypassing TLS certificate validation.
Is CVE-2019-7615 specific to a certain programming language?
Yes, CVE-2019-7615 specifically affects the Elastic APM agent for Ruby.