elastic-apm 2.5.0

1 security vulnerability found in version 2.5.0

Elastic APM agent for Ruby vulnerable to Improper Certificate Validation

high severity CVE-2019-7615
high severity CVE-2019-7615
Patched versions: >= 2.9.0

A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the server_ca_cert setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the middle style attack against the Ruby agent.

No officially reported memory leakage issues detected.


This gem version does not have any officially reported memory leaked issues.

No license issues detected.


This gem version has a license in the gemspec.

This gem version is available.


This gem version has not been yanked and is still available for usage.