Approved changes feed: RSS · Atom

cpe:2.3:a:elastic:elastic_apm_agent_for_ruby:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElastic (1d0b8d2a-fd47-5b20-b005-34326f9bd037)
ProductElastic Apm Agent For Ruby (92038bdb-71b2-585e-8d9a-643a1c6aed2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7615 vulnerable 2026-06-03 14:40:41.958081 Details available
A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'server_ca_cert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the middle style attack against the Ruby agent.
Published: 2019-07-30T21:15:47.000Z
Updated: 2024-08-04T20:54:27.931Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.