ruby4.0-rubygem-web-console-4.2.1-1.9 on GA media
ruby4.0-rubygem-web-console-4.2.1-1.9 on GA media
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-3224US | medium4.3 | Exploit | ||
request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address,… | ||||
references
External citations — patches, advisories, analysis.
- URL of this CSAF noticeself
- SUSE CVE CVE-2015-3224 pageself
- SUSE ratingsexternal
remediations (4)
- Fixedruby4.0-rubygem-web-console-0:4.2.1-1.9.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-web-console-0:4.2.1-1.9.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-web-console-0:4.2.1-1.9.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-web-console-0:4.2.1-1.9.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan