Net-Ldap Project Net-Ldap
2 CVEs affecting Net-Ldap Project Net-Ldap. Latest disclosed: 2019-11-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17718 | Medium | 5.9 | 2017-12-17 | The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation. |
CVE-2014-0083 | Medium | 5.5 | 2019-11-21 | The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords. |