Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-16782

There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.

Published

2019-12-18T20:15:16.180

Last Modified

2025-02-13T15:37:40.953

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Secondary
CWE-208
Type: Primary
CWE-203

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	rack	rack	< 1.6.12	Yes
Application	rack	rack	< 2.0.8	Yes
Operating System	fedoraproject	fedora	31	Yes
Operating System	opensuse	leap	15.1	Yes

References

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2019/12/18/2 Mailing List, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2019/12/18/3 Mailing List, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2019/12/19/3 Mailing List, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2020/04/08/1 Mailing List, Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2020/04/09/2 Mailing List, Third Party Advisory ([email protected])
https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38 Patch, Third Party Advisory ([email protected])
https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3 Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX/ ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2019/12/18/2 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2019/12/18/3 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2019/12/19/3 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2020/04/08/1 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2020/04/09/2 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX/ (af854a3a-2127-422b-91ae-364da2661108)