# net-ldap (RubyGems) vulnerabilities

2 known vulnerabilities, with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://rubygems.org/gems/net-ldap

## Advisories (2)

### [CVE-2014-0083](https://cve.now/CVE-2014-0083): The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

- Severity: Unrated
- Published: Nov 21, 2019
- Affected: fixed in 0.16.2.

### [CVE-2017-17718](https://cve.now/CVE-2017-17718): The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

- Severity: Unrated
- Published: Dec 17, 2017
- Affected: fixed in 0.16.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/rubygems/net-ldap
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.