Published: 19/06/2020 Updated: 16/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an malicious user to forge a secure or host-only cookie prefix.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rack project rack
debian debian linux 9.0
debian debian linux 10.0
canonical ubuntu linux 18.04

Synopsis Important: Satellite 68 release Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Satellite 68 for RHEL 7Red Hat Product Security has rated this update as having a security impactof Important A Common Vulnerability Scoring System (CVSS) base score,which giv ...

Debian Bug report logs - #963477 ruby-rack: CVE-2020-8184 Package: src:ruby-rack; Maintainer for src:ruby-rack is Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 22 Jun 2020 07:03:01 UTC Severity: important Tags: se ...

Demo for Cloud Native Buildpacks Office Hours at Kubecon EU 2022

Cloud Native Buildpacks Office Hours Demo - Kubecon EU 2022 Here we build a simple Ruby app using Paketo Buildpacks We store the buildpack-generated Software Bill of Materials (SBOM) files when we build We scan the SBOM files using Grype and see that one of our dependencies has a CVE We then update the dependency, rebuild, and scan the new SBOM to see that it has no known vu

CWE-20 https://groups.google.com/g/rubyonrails-security/c/OWtmozPH9Ak https://hackerone.com/reports/895727 https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html https://usn.ubuntu.com/4561-1/https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html https://access.redhat.com/errata/RHSA-2020:4366 https://nvd.nist.gov https://github.com/mboldt/2022-05-kubecon-eu-cnb-office-hours-demo

CVE-2020-8184

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect