Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2015-1820 →

DEBIAN-CVE-2015-1820

REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 ruby-rest-client

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-6"}]}]

Debian:13 ruby-rest-client

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-6"}]}]

Debian:14 ruby-rest-client

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-6"}]}]

Références

advisory security-tracker.debian.org