Session fixation vulnerability in Rails
Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-5380US | medium6.8 | — | ||
Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessio… | ||||
02
references
External citations — patches, advisories, analysis.
- http://bugs.gentoo.org/show_bug.cgi?id=195315WEB
- http://docs.info.apple.com/article.html?artnum=307179WEB
- http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.htmlWEB
- http://secunia.com/advisories/27657WEB
- http://secunia.com/advisories/27965WEB
- http://secunia.com/advisories/28136WEB
- http://security.gentoo.org/glsa/glsa-200711-17.xmlWEB
- http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-releaseWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan