PT-2018-2306 · Sinatra+2 · Rack-Protection+2

Ghost · Publicado 2018-03-07 · Atualizado 2020-08-24 · CVE-2018-1000119

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier

Description The issue is related to a timing attack vulnerability in the CSRF token checking mechanism. This vulnerability can result in signatures being exposed and appears to be exploitable via network connectivity to the Ruby application. The vulnerability is associated with errors in the CSRF token checking procedure, which can allow a remote attacker to gain unauthorized access to protected information.

Recommendations For versions 1.5.4 and earlier, update to version 1.5.5. For version 2.0.0.rc3 and earlier, update to version 2.0.0.

Exploit

Correção

Information Disclosure

Side Channel Attack

Enumeração de Fraquezas

CWE-200

CWE-203

Identificadores relacionados

BDU:2019-00439

CESA-2018_1060

CVE-2018-1000119

DSA-4247-1

GHSA-688C-3X49-6RQJ

RHSA-2018:1060

RHSA-2018_1060

RHSA-2020:4366

RHSA-2021:1313

Produtos afetados

Centos

Red Hat

Rack-Protection

Referências · 19

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-protection/CVE-2018-1000119.yml · Exploit
• https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb#commitcomment-27964109 · Correção
• https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb · Nota
• https://github.com/sinatra/rack-protection · Nota
• https://github.com/sinatra/rack-protection/pull/98 · Nota
• https://bdu.fstec.ru/vul/2019-00439 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000119 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-4247-1 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2018-1060.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-1000119 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-688c-3x49-6rqj · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:1060 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000119 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1000119 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-1000119 · Nota de Segurança