Lucene search
RubySecRUBY:RAILS-2007-5380HistoryOct 23, 2017 - 9:00 p.m.
Moderate severity vulnerability that affects rails
2017-10-2321:00:00
RubySec
weblog.rubyonrails.org
6
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.021
Percentile
89.5%
Session fixation vulnerability in Rails before 1.2.4, as used for Ruby
on Rails, allows remote attackers to hijack web sessions via unspecified vectors
related to “URL-based sessions.”
Affected configurations
Node
rubyrailsRange≤1.2.4
Related
debiancve
debiancve
CVE-2007-5380
2007-10-19 23:17:00
CVE-2007-6077
2007-11-21 21:46:00
nvd
nvd
CVE-2007-5380
2007-10-19 23:17:00
CVE-2007-6077
2007-11-21 21:46:00
cve
cve
CVE-2007-5380
2007-10-19 23:17:00
CVE-2007-6077
2007-11-21 21:46:00
prion
prion
Session fixation
2007-10-19 23:17:00
Session fixation
2007-11-21 21:46:00
osv
osv
Session fixation vulnerability in Rails
2017-10-24 18:33:38
session fixation protection mechanism in cgi_process.rb in Rails
2017-10-24 18:33:38
nessus
nessus
openSUSE 10 Security Update : rubygem-actionpack (rubygem-actionpack-4754)
2007-11-30 00:00:00
Ruby on Rails Multiple Method Session Fixation
2007-11-28 00:00:00
ubuntucve
ubuntucve
CVE-2007-5380
2007-10-19 00:00:00
CVE-2007-6077
2007-11-21 00:00:00
cvelist
cvelist
CVE-2007-5380
2007-10-19 23:00:00
CVE-2007-6077
2007-11-21 21:00:00
github
github
Session fixation vulnerability in Rails
2017-10-24 18:33:38
session fixation protection mechanism in cgi_process.rb in Rails
2017-10-24 18:33:38
openvas
openvas
FreeBSD Ports: rubygem-rails
2008-09-04 00:00:00
FreeBSD Ports: rubygem-rails
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200711-17 (rails)
2008-09-24 00:00:00
rubygems
rubygems
Moderate severity vulnerability that affects rails
2017-10-23 21:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2007-11-17 00:00:00
[ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities
2007-11-15 00:00:00
freebsd
freebsd
rubygem-rails -- session-fixation vulnerability
2007-11-24 00:00:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2007-11-14 00:00:00
Ruby on Rails: Multiple vulnerabilities
2009-12-20 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.021
Percentile
89.5%
Related for RUBY:RAILS-2007-5380