Session fixation vulnerability in Rails
Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2007-5380US | medium6.8 | — | ||
Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessio… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://bugs.gentoo.org/show_bug.cgi?id=195315WEB
- http://docs.info.apple.com/article.html?artnum=307179WEB
- http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.htmlWEB
- http://secunia.com/advisories/27657WEB
- http://secunia.com/advisories/27965WEB
- http://secunia.com/advisories/28136WEB
- http://security.gentoo.org/glsa/glsa-200711-17.xmlWEB
- http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-releaseWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan