PT-2013-2176 · Plataformatec · Devise

Reedloden · Publicado 2013-04-25 · Atualizado 2018-10-30 · CVE-2013-0233

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Devise gem versions 1.5.x before 1.5.4 Devise gem versions 2.0.x before 2.0.5 Devise gem versions 2.1.x before 2.1.3 Devise gem versions 2.2.x before 2.2.3

Description The issue is related to improper type conversion when performing database queries. This might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors. For example, it could be used to reset passwords of arbitrary accounts.

Recommendations For Devise gem version 1.5.x, update to version 1.5.4 or later. For Devise gem version 2.0.x, update to version 2.0.5 or later. For Devise gem version 2.1.x, update to version 2.1.3 or later. For Devise gem version 2.2.x, update to version 2.2.3 or later.

Exploit

Correção

Incorrect Type Conversion or Cast

Enumeração de Fraquezas

CWE-704

CWE-399

Identificadores relacionados

CVE-2013-0233

GHSA-JXHW-MG8M-2PJ8

Produtos afetados

Devise

Referências · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/rails_devise_pass_reset.rb · Exploit
• 🔥 http://metasploit.com/modules/auxiliary/admin/http/rails_devise_pass_reset · Exploit
• 🔥 http://phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html · Exploit
• https://github.com/Snorby/snorby/issues/261 · Nota
• http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0233 · Nota de Segurança
• https://ubuntu.com/security/CVE-2013-0233 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-0233 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-jxhw-mg8m-2pj8 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-0233 · Aviso do Fabricante
• https://web.archive.org/web/20140726005251/http://phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html · Nota
• https://osv.dev/vulnerability/CVE-2013-0233 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-03/msg00000.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-0233 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2013/01/29/3 · Nota