A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2019:0600 | Third Party Advisory |
| https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ | Exploit Mailing List Mitigation Third Party Advisory |
| https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/ | Vendor Advisory |
| https://access.redhat.com/errata/RHSA-2019:0600 | Third Party Advisory |
| https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ | Exploit Mailing List Mitigation Third Party Advisory |
| https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 03:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2019:0600 - Third Party Advisory | |
| References | () https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ - Exploit, Mailing List, Mitigation, Third Party Advisory | |
| References | () https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/ - Vendor Advisory |
Information
Published : 2018-11-30 19:29
Updated : 2024-11-21 03:52
NVD link : CVE-2018-16476
Mitre link : CVE-2018-16476
CVE.ORG link : CVE-2018-16476
JSON object : View
Products Affected
redhat
- cloudforms
rubyonrails
- rails