CVE:CVE-2014-0036
CNNVD:CNNVD-201404-357
rbovirt gem for Ruby是以色列软件开发者Amos Benari所研发的一个用于oVirt REST API中的Ruby客户端。
Ruby的rbovirt gem 0.0.23及之前的版本中存在安全漏洞，该漏洞源于程序使用禁用SSL认证的rest-client gem。远程攻击者可利用该漏洞实施中间人攻击。
solution:Upgrade amos_benari rbovirt to a higher version than 0.0.23,0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.0.9,0.0.10,0.0.11,0.0.12,0.0.13,0.0.14,0.0.15,0.0.16,0.0.17,0.0.18,0.0.19,0.0.20,0.0.21,0.0.22,and avoid the version (,0.0.23],0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.0.9,0.0.10,0.0.11,0.0.12,0.0.13,0.0.14,0.0.15,0.0.16,0.0.17,0.0.18,0.0.19,0.0.20,0.0.21,0.0.22