Approved changes feed: RSS · Atom

cpe:2.3:a:elastic:apm-agent-ruby:*:*:*:*:*:ruby:*:*

part: a version: * update: *

VendorElastic (1d0b8d2a-fd47-5b20-b005-34326f9bd037)
ProductApm Agent Ruby (2e1c6c56-c0d1-5bfc-9525-c6e78e4986e6)
Edition*
Language*
Software edition*
Target softwareruby
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7615 vulnerable 2026-06-03 14:40:41.959218 Details available
A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'server_ca_cert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the middle style attack against the Ruby agent.
Published: 2019-07-30T21:15:47.000Z
Updated: 2024-08-04T20:54:27.931Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.