Vulnerability Database

319,478

Total vulnerabilities in the database

CVE-2017-17718

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

Published: Dec 17, 2017
Updated: Nov 9, 2025
CVE: CVE-2017-17718
GHSA: GHSA-m7p8-9w66-9frm
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

CWE-295

OWASP TOP 10:

A3 - Sensitive Data Exposure

Affected Software
References

Software	From	Fixed in
net-ldap_project / net-ldap	0.15.0	0.15.0.x
net-ldap_project / net-ldap	0.14.0	0.14.0.x
net-ldap_project / net-ldap	0.13.0	0.13.0.x
net-ldap_project / net-ldap	0.12.1	0.12.1.x
net-ldap_project / net-ldap	0.12.0	0.12.0.x
net-ldap_project / net-ldap	0.11	0.11.x
net-ldap_project / net-ldap	0.10.1	0.10.1.x
net-ldap_project / net-ldap	0.10.0	0.10.0.x
net-ldap_project / net-ldap	0.9.0	0.9.0.x
net-ldap_project / net-ldap	0.8.0	0.8.0.x
net-ldap_project / net-ldap	0.7.0	0.7.0.x
net-ldap_project / net-ldap	0.6.1	0.6.1.x
net-ldap_project / net-ldap	0.6.0	0.6.0.x
net-ldap_project / net-ldap	0.5.1	0.5.1.x
net-ldap_project / net-ldap	0.3.1	0.3.1.x
net-ldap_project / net-ldap	0.3.0	0.3.0.x
net-ldap_project / net-ldap	0.2.2	0.2.2.x
net-ldap_project / net-ldap	0.2.1	0.2.1.x
net-ldap_project / net-ldap	0.2	0.2.x
net-ldap_project / net-ldap	0.1.1	0.1.1.x
net-ldap_project / net-ldap	0.1.0	0.1.0.x
net-ldap_project / net-ldap	0.0.5	0.0.5.x
net-ldap	-	0.16.0

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime