CVE-2019-16782

Published: Dic 18, 2019 Last Modified: Feb 13, 2025 EU-VD ID: EUVD-2019-0795 Aliases: GHSA-hrqr-hxpp-chr3
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,3
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: none
Availability: none
MEDIUM 4,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none

Description

AI Translation Available

There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0163
Percentile
0,8th
Updated

EPSS Score Trend (Last 91 Days)

203

Observable Discrepancy

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Access Control
Potential Impacts:
Read Application Data Bypass Protection Mechanism
Applicable Platforms
All platforms may be affected
View CWE Details
208

Observable Timing Discrepancy

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Access Control
Potential Impacts:
Read Application Data Bypass Protection Mechanism
Applicable Platforms
All platforms may be affected
View CWE Details
Application

Rack by Rack

Product Information
Vendor Rack
Product Rack
Version Range Affected
From 2.0.0 (inclusive)
To 2.0.8 (exclusive)
cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 31
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Leap by Opensuse

Product Information
Vendor Opensuse
Product Leap
Version 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Rack by Rack

Product Information
Vendor Rack
Product Rack
Version Range Affected
To 1.6.12 (exclusive)
cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://lists.opensuse.org/opensuse-security-announce/2020-0…
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html
https://github.com/rack/rack/commit/7fecaee81f59926b6e19135…
Patch Third Party Advisory
https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38
https://github.com/rack/rack/security/advisories/GHSA-hrqr-…
Third Party Advisory
https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
http://www.openwall.com/lists/oss-security/2019/12/18/2
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/18/2
http://www.openwall.com/lists/oss-security/2019/12/18/3
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/18/3
http://www.openwall.com/lists/oss-security/2019/12/19/3
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/19/3
http://www.openwall.com/lists/oss-security/2020/04/08/1
Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/08/1
http://www.openwall.com/lists/oss-security/2020/04/09/2
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/09/2
http://lists.opensuse.org/opensuse-security-announce/2020-0…
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html
https://github.com/rack/rack/commit/7fecaee81f59926b6e19135…
Patch Third Party Advisory
https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38
https://github.com/rack/rack/security/advisories/GHSA-hrqr-…
Third Party Advisory
https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
http://www.openwall.com/lists/oss-security/2019/12/18/2
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/18/2
http://www.openwall.com/lists/oss-security/2019/12/18/3
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/18/3
http://www.openwall.com/lists/oss-security/2019/12/19/3
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/19/3
http://www.openwall.com/lists/oss-security/2020/04/08/1
Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/08/1
http://www.openwall.com/lists/oss-security/2020/04/09/2
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/09/2