7.5

CVE-2018-16476

Exploit

A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.

Data is provided by the National Vulnerability Database (NVD)
Rubyonrails ≫ Rails Version >= 4.2.0 < 4.2.11
Rubyonrails ≫ Rails Version >= 5.0.0 < 5.0.7.1
Rubyonrails ≫ Rails Version >= 5.1.0 < 5.1.6.1
Rubyonrails ≫ Rails Version >= 5.2.0 < 5.2.1.1
Redhat ≫ Cloudforms Version4.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.82% 0.736
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ
Third Party Advisory
Exploit
Mailing List
Mitigation