Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-42246

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:96a3827bc5b9e4096b29c6df2a6fdfcab00ea067e6927d61075dfa4a4e288d36
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
3

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 35 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.0.648-39.el7_9.1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.7-167.el9_8","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/12

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260615131010.489197e6","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9080020260615131001.9","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.3.10-11.el10_0.2","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.8"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260625114827.63b34585","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/system-rhel9","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/29

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.4-161.el9_2.3","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/15

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/zync-rhel8","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/30

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260630123825.ad008a3a","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"rhcos","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/33

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9040020260630065449.9","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.3.10-13.el10_2","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp21/system","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/23

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"unknown","packageName":"ruby","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/32

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.6"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260630123825.ad008a3a","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.7-162.el9_4.3","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/16

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"ruby3-3-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.3.10-23.2.hum1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/22

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260625114827.63b34585","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"ruby4-0-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"4.0.0-33.4.hum1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/20

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.7-165.el9_6.1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/18

{"product":"net-imap","vendor":"ruby","versions":[{"status":"affected","version":"< 0.3.10"},{"status":"affected","version":">= 0.4.0, < 0.4.24"},{"status":"affected","version":">= 0.5.0, < 0.5.14"},{"status":"affected","version":">= 0.6.0, < 0.6.4"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260630124058.522a0ee4","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp22/system","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/25

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp22/zync","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/26

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"ruby3-4-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.4.10-31.hum1","versionType":"rpm"},{"lessThan":"*","status":"unaffected","version":"3.4.8-31.2.hum1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/21

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp21/zync","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/24

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/system-rhel8","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/28

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260630124058.522a0ee4","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/system-rhel7","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/27

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/zync-rhel9","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/31

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260615131019.489197e6","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"ruby4.0","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.3-35.el10_2","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"ruby:4.0","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9080020260619130154.9","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/14

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9060020260630075016.9","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/19
cvss · 2 assertions

{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/metrics/1/cvssV3_1

{"metric":{"attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":7.6,"baseSeverity":"HIGH","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/metrics/0/cvssV4_0
cwe · 6 assertions

{"cweId":"CWE-841","description":"CWE-841: Improper Enforcement of Behavioral Workflow","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/4/descriptions/0

{"cweId":"CWE-325","description":"Missing Cryptographic Step","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/problemTypes/0/descriptions/0

{"cweId":"CWE-393","description":"CWE-393: Return of Wrong Status Code","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/1/descriptions/0

{"cweId":"CWE-392","description":"CWE-392: Missing Report of Error Condition","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-636","description":"CWE-636: Not Failing Securely ('Failing Open')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/3/descriptions/0

{"cweId":"CWE-754","description":"CWE-754: Improper Check for Unusual or Exceptional Conditions","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/2/descriptions/0

Affected products and versions

35 source assertions
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.0.648-39.el7_9.1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/3
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.7-167.el9_8","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/12
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260615131010.489197e6","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/5
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9080020260615131001.9","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/13
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.3.10-11.el10_0.2","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/2
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.8"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260625114827.63b34585","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/10
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/system-rhel9","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/29
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.4-161.el9_2.3","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/15
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/zync-rhel8","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/30
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260630123825.ad008a3a","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/8
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"rhcos","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/33
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9040020260630065449.9","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/17
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.3.10-13.el10_2","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/1
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp21/system","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/23
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"unknown","packageName":"ruby","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/32
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.6"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260630123825.ad008a3a","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/9
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.7-162.el9_4.3","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/16
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"ruby3-3-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.3.10-23.2.hum1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/22
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260625114827.63b34585","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/11
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"ruby4-0-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"4.0.0-33.4.hum1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/20
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"ruby","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.7-165.el9_6.1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/18
{"product":"net-imap","vendor":"ruby","versions":[{"status":"affected","version":"< 0.3.10"},{"status":"affected","version":">= 0.4.0, < 0.4.24"},{"status":"affected","version":">= 0.5.0, < 0.5.14"},{"status":"affected","version":">= 0.6.0, < 0.6.4"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260630124058.522a0ee4","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/6
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp22/system","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/25
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp22/zync","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/26
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"ruby3-4-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.4.10-31.hum1","versionType":"rpm"},{"lessThan":"*","status":"unaffected","version":"3.4.8-31.2.hum1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/21
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp21/zync","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/24
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/system-rhel8","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/28
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260630124058.522a0ee4","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/7
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/system-rhel7","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/27
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_3scale_amp:2"],"defaultStatus":"unaffected","packageName":"3scale-amp2/zync-rhel9","product":"Red Hat 3scale API Management Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/31
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"ruby:2.5","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260615131019.489197e6","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/4
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"ruby4.0","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.3-35.el10_2","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"ruby:4.0","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9080020260619130154.9","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/14
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"defaultStatus":"affected","packageName":"ruby:3.3","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9060020260630075016.9","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/affected/19

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/metrics/1/cvssV3_1
{"metric":{"attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":7.6,"baseSeverity":"HIGH","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

6 source assertions
{"cweId":"CWE-841","description":"CWE-841: Improper Enforcement of Behavioral Workflow","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/4/descriptions/0
{"cweId":"CWE-325","description":"Missing Cryptographic Step","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/problemTypes/0/descriptions/0
{"cweId":"CWE-393","description":"CWE-393: Return of Wrong Status Code","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/1/descriptions/0
{"cweId":"CWE-392","description":"CWE-392: Missing Report of Error Condition","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/0/descriptions/0
{"cweId":"CWE-636","description":"CWE-636: Not Failing Securely ('Failing Open')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/3/descriptions/0
{"cweId":"CWE-754","description":"CWE-754: Improper Check for Unusual or Exceptional Conditions","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/problemTypes/2/descriptions/0

Source references

31 source assertions
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33462"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/15
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33512"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/17
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33514"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/7
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33515"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/8
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33540"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/6
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33551"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/22
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33552"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/21
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33565"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/5
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33576"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/18
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33577"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/19
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33630"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/13
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33721"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/20
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:34076"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/11
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:35834"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/12
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:35866"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/9
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:35867"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/10
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:35895"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/4
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36099"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/14
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:37238"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/16
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:37397"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/3
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-42246"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/0
{"name":"RHBZ#2468499","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468499"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/1
{"name":"https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618","tags":["x_refsource_MISC"],"url":"https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/1
{"name":"https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e","tags":["x_refsource_MISC"],"url":"https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/2
{"name":"https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c","tags":["x_refsource_MISC"],"url":"https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/3
{"name":"https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da","tags":["x_refsource_MISC"],"url":"https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/4
{"name":"https://github.com/ruby/net-imap/releases/tag/v0.3.10","tags":["x_refsource_MISC"],"url":"https://github.com/ruby/net-imap/releases/tag/v0.3.10"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/5
{"name":"https://github.com/ruby/net-imap/releases/tag/v0.4.24","tags":["x_refsource_MISC"],"url":"https://github.com/ruby/net-imap/releases/tag/v0.4.24"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/6
{"name":"https://github.com/ruby/net-imap/releases/tag/v0.5.14","tags":["x_refsource_MISC"],"url":"https://github.com/ruby/net-imap/releases/tag/v0.5.14"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/7
{"name":"https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp","tags":["x_refsource_CONFIRM"],"url":"https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/cna/references/0
{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9a15e799205c8e9488d1ea7696a24ee3c40c136b58bbefbc07b366d5e1e95f8e · sha256:3e9c0c53ab322540… · /containers/adp/1/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer