Lucene search

CVE-2012-3424

🗓️ 08 Aug 2012 10:19:26Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 38 Views

The decode_credentials method in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 allows remote attackers to cause a denial of service

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 46
GitLab Advisory Database	actionpack Improper Authentication vulnerability	24 Oct 201700:00	–	gitlab
Github Security Blog	actionpack Improper Authentication vulnerability	24 Oct 201718:33	–	github
seebug.org	Ruby on Rails 'authenticate_or_request_with_http_digest'方法拒绝服务漏洞	31 Jul 201200:00	–	seebug
Tenable Nessus	Fedora 16 : rubygem-actionpack-3.0.10-8.fc16 (2012-11353)	10 Aug 201200:00	–	nessus
Tenable Nessus	FreeBSD : rubygem-actionpack -- Denial of Service (ae2fa87c-4bca-4138-8be1-67ce2a19b3a8)	27 Jul 201200:00	–	nessus
Tenable Nessus	Fedora 17 : rubygem-actionpack-3.0.11-6.fc17 (2012-11363)	10 Aug 201200:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-actionmailer-3_2 / rubygem-actionpack-3_2 / rubygem-activemodel-3_2 / etc (openSUSE-SU-2012:1066-1)	13 Jun 201400:00	–	nessus
Tenable Nessus	RHEL 6 : Ruby on Rails in Subscription Asset Manager (RHSA-2013:0154)	24 Jan 201300:00	–	nessus
Tenable Nessus	RHEL 6 : openshift (RHSA-2013:0582)	6 Dec 201800:00	–	nessus
Tenable Nessus	RHEL 6 : CloudForms Commons 1.1 (RHSA-2012:1542)	27 Apr 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	12	all	rails	2:6.1.7.10+dfsg-1~deb12u1	rails_2:6.1.7.10+dfsg-1~deb12u1_all.deb
Debian	11	all	rails	2:6.0.3.7+dfsg-2+deb11u2	rails_2:6.0.3.7+dfsg-2+deb11u2_all.deb
Debian	999	all	rails	2:7.2.2.1+dfsg-7	rails_2:7.2.2.1+dfsg-7_all.deb
Debian	13	all	rails	2:7.2.2.1+dfsg-7	rails_2:7.2.2.1+dfsg-7_all.deb

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Aug 2012 10:26Current

6.2Medium risk

Vulners AI Score6.2

CVSS25

EPSS0.00981