RubyGems httpclient Man in the Middle Information Disclosure Vulnerability

Bugtraq ID:	70897
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 08 2014 12:00AM
Updated:	Jul 08 2014 12:00AM
Credit:	Vendor reported this issue.
Vulnerable:
Not Vulnerable:

RubyGems httpclient Man in the Middle Information Disclosure Vulnerability

httpclient is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to perform man-in-the-middle attacks and obtain sensitive information, which will aid in further attacks.

Versions prior to httpclient 2.4.0 are vulnerable.

RubyGems httpclient Man in the Middle Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RubyGems httpclient Man in the Middle Information Disclosure Vulnerability

References:

• httpclient - Changelog (nahi)
  
• RubyGems httpclient - Homepage (nahi)
  
• RubyGems httpclient - Product Homepage (nahi)