Количество 4
Количество 4
CVE-2009-2422
The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.
CVE-2009-2422
The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.
CVE-2009-2422
The example code for the digest authentication functionality (http_aut ...
GHSA-rxq3-gm4p-5fj4
rails vulnerable to improper authentication
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2009-2422 The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password. | CVSS3: 9.8 | 3% Низкий | около 17 лет назад |
 | CVE-2009-2422 The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password. | CVSS3: 9.8 | 3% Низкий | около 17 лет назад |
| CVE-2009-2422 The example code for the digest authentication functionality (http_aut ... | CVSS3: 9.8 | 3% Низкий | около 17 лет назад |
| GHSA-rxq3-gm4p-5fj4 rails vulnerable to improper authentication | CVSS3: 9.8 | 3% Низкий | почти 9 лет назад |
Уязвимостей на страницу