Lucene search
Redhat.comRH:CVE-2019-16782HistoryApr 08, 2020 - 9:49 p.m.
CVE-2019-16782
2020-04-0821:49:55
redhat.com
access.redhat.com
9
0.002 Low
EPSS
Percentile
65.0%
A flaw was found in rubygem-rack in versions prior to 1.6.12 and 2.0.8. An information leak may allow an attacker to find and hijack sessions using timing attacks targeting the session ID. The highest threat from the vulnerability is to data confidentiality.
Mitigation
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
Related
cve
cve
CVE-2019-16782
2019-12-18 20:15:16
CVE-2019-25025
2021-03-05 06:15:12
github
github
Possible Information Leak / Session Hijack Vulnerability in Rack
2019-12-18 19:01:31
Activerecord-session_store Vulnerable to Timing Attack
2021-03-09 00:45:31
nessus
nessus
FreeBSD : rack -- information leak / session hijack vulnerability (66e4dc99-28b3-11ea-8dde-08002728f74c)
2019-12-30 00:00:00
Fedora 31 : 1:rubygem-rack (2020-57fc0d0156)
2020-01-21 00:00:00
RHEL 8 : CloudForms 5.0.6 (RHSA-2020:2480)
2020-06-10 00:00:00
ubuntucve
ubuntucve
CVE-2019-16782
2019-12-18 00:00:00
CVE-2019-25025
2021-03-05 00:00:00
osv
osv
CVE-2019-16782
2019-12-18 20:15:16
Possible Information Leak / Session Hijack Vulnerability in Rack
2019-12-18 19:01:31
Activerecord-session_store Vulnerable to Timing Attack
2021-03-09 00:45:31
redhat
redhat
(RHSA-2020:2480) Moderate: CloudForms 5.0.6 security, bug fix and enhancement update
2020-06-10 13:30:30
(RHSA-2021:1313) Moderate: Satellite 6.9 Release
2021-04-21 12:43:38
(RHSA-2020:4366) Important: Satellite 6.8 release
2020-10-27 12:45:25
symantec
symantec
Rack CVE-2019-16782 Information Disclosure Vulnerability
2019-12-18 00:00:00
openvas
openvas
Fedora: Security Advisory for rubygem-rack (FEDORA-2020-57fc0d0156)
2020-01-27 00:00:00
Mageia: Security Advisory (MGASA-2020-0252)
2022-01-28 00:00:00
openSUSE: Security Advisory for rubygem-rack (openSUSE-SU-2020:0214-1)
2020-02-13 00:00:00
cvelist
cvelist
CVE-2019-25025
2021-03-05 05:54:10
nvd
nvd
CVE-2019-16782
2019-12-18 20:15:16
CVE-2019-25025
2021-03-05 06:15:12
freebsd
freebsd
rack -- information leak / session hijack vulnerability
2019-12-08 00:00:00
debiancve
debiancve
CVE-2019-16782
2019-12-18 20:15:16
CVE-2019-25025
2021-03-05 06:15:00
ibm
ibm
prion
prion
Session fixation
2019-12-18 20:15:00
Design/Logic Flaw
2021-03-05 06:15:00
veracode
veracode
Information Disclosure
2019-12-19 05:35:11
Information Disclosure
2021-03-08 02:45:43
fedora
fedora
[SECURITY] Fedora 31 Update: rubygem-rack-2.0.8-1.fc31
2020-01-18 20:55:46
rubygems
rubygems
activerecord-session_store Timing Attack
2021-03-07 21:00:00
mageia
mageia
Updated ruby-rack packages fix security vulnerability
2020-06-11 01:57:01
gitlab
gitlab
Observable Timing Discrepancy
2021-03-05 00:00:00
suse
suse
Security update for rubygem-rack (moderate)
2020-02-12 00:00:00
ubuntu
ubuntu
Rack vulnerabilities
2022-12-13 00:00:00