6.3

CVE-2019-16782

Possible Information Leak / Session Hijack Vulnerability in Rack

There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rack ≫ Rack SwPlatformruby Version < 1.6.12
Rack ≫ Rack SwPlatformruby Version >= 2.0.0 < 2.0.8
Fedoraproject ≫ Fedora Version31
Opensuse ≫ Leap Version15.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.69% 0.883
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
security-advisories@github.com 6.3 1.8 4
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

CWE-208 Observable Timing Discrepancy

Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/18/2
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2019/12/18/3
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2019/12/19/3
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2020/04/08/1
Patch
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2020/04/09/2
Third Party Advisory
Mailing List
https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38
Patch
Third Party Advisory
https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX/