Lucene search
Veracode Vulnerability DatabaseVERACODE:7894HistoryNov 28, 2018 - 2:22 a.m.
Information Disclosure
2018-11-2802:22:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.002 Low
EPSS
Percentile
52.2%
activejob is vulnerable to information disclosure. A lack of validation in the deserialize_argument function in arguments.rb allows remote attackers access to information that is otherwise not accessible when deserializing GlobalID objects that were not generated by Active Jobs.
References
access.redhat.com/errata/RHSA-2019:0600
github.com/rails/rails/commit/72300f9742745f9535b06d45a9632e948ed7d79b
github.com/rubysec/ruby-advisory-db/pull/372/commits/7b6a0c7ce128049a0ca75a81b0784c3b06e47158
groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ
weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/
Related
nessus
nessus
openSUSE Security Update : rubygem-activejob-5_1 (openSUSE-2018-1502)
2018-12-10 00:00:00
openSUSE Security Update : rubygem-activejob-5_1 (openSUSE-2019-982)
2019-03-27 00:00:00
RHEL 7 : CloudForms 4.6.9 (RHSA-2019:0600)
2024-04-27 00:00:00
openvas
openvas
Fedora Update for rubygem-activejob FEDORA-2019-d0af506401
2019-05-07 00:00:00
Fedora Update for rubygem-activejob FEDORA-2019-31e6f6e545
2019-02-26 00:00:00
redhatcve
redhatcve
CVE-2018-16476
2019-10-06 08:53:41
cve
cve
CVE-2018-16476
2018-11-30 19:29:00
redhat
redhat
osv
osv
Improper Access Control in activejob
2018-12-05 17:24:27
CVE-2018-16476
2018-11-30 19:29:00
cvelist
cvelist
CVE-2018-16476
2018-11-30 19:00:00
nvd
nvd
CVE-2018-16476
2018-11-30 19:29:00
gitlab
gitlab
Deserialization of Untrusted Data
2018-11-30 00:00:00
suse
suse
Security update for rubygem-activejob-5_1 (low)
2018-12-08 00:21:00
fedora
fedora
[SECURITY] Fedora 28 Update: rubygem-activejob-5.1.5-2.fc28
2019-02-26 01:30:42
[SECURITY] Fedora 29 Update: rubygem-activejob-5.2.1-2.fc29
2019-02-26 03:07:17
ubuntucve
ubuntucve
CVE-2018-16476
2018-11-30 00:00:00
prion
prion
Improper access control
2018-11-30 19:29:00
debiancve
debiancve
CVE-2018-16476
2018-11-30 19:29:00
freebsd
freebsd
Rails -- Active Job vulnerability
2018-11-27 00:00:00
Gitlab -- Multiple vulnerabilities
2019-01-31 00:00:00
github
github
Improper Access Control in activejob
2018-12-05 17:24:27
rubygems
rubygems
Broken Access Control vulnerability in Active Job
2018-11-26 21:00:00