PT-2018-2306 · Sinatra+2 · Rack-Protection+2

Ghost · Published 2018-03-07 · Updated 2020-08-24 · CVE-2018-1000119

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier

Description The issue is related to a timing attack vulnerability in the CSRF token checking mechanism. This vulnerability can result in signatures being exposed and appears to be exploitable via network connectivity to the Ruby application. The vulnerability is associated with errors in the CSRF token checking procedure, which can allow a remote attacker to gain unauthorized access to protected information.

Recommendations For versions 1.5.4 and earlier, update to version 1.5.5. For version 2.0.0.rc3 and earlier, update to version 2.0.0.

Exploit

Fix

Information Disclosure

Side Channel Attack

Weakness Enumeration

CWE-200

CWE-203

Related Identifiers

BDU:2019-00439

CESA-2018_1060

CVE-2018-1000119

DSA-4247-1

GHSA-688C-3X49-6RQJ

RHSA-2018:1060

RHSA-2018_1060

RHSA-2020:4366

RHSA-2021:1313

Affected Products

Centos

Red Hat

Rack-Protection

References · 19

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-protection/CVE-2018-1000119.yml · Exploit
• https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb#commitcomment-27964109 · Patch
• https://bdu.fstec.ru/vul/2019-00439 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000119 · Security Note
• https://osv.dev/vulnerability/DSA-4247-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2018-1060.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-1000119 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-688c-3x49-6rqj · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1060 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000119 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000119 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-1000119 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1000119 · Vendor Advisory
• https://debian.org/security/2018/dsa-4247 · Vendor Advisory
• https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb · Note