| Package | Affected versions | Patched versions |
|---|---|---|
| jruby-openssl | < 0.6 | 0.6 |
| jruby-openssl | < 0.6 | 0.6 |
A security problem involving peer certificate verification was found where failed verification silently did nothing, making affected applications vulnerable to attackers. Attackers could lead a client application to believe that a secure connection to a rogue SSL server is legitimate. Attackers could also penetrate client-validated SSL server applications with a dummy certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free