PT-2019-14831

🗓️ 18 Dec 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

Rack before 1.6.12 and before 2.0.8 exposed to session hijack via timing attacks on session ids.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: A security vulnerability in Ruby on Rails Action Pack affects IBM Cloud Pak for Multicloud Management Infrastructure Management	9 Nov 202118:17	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9 (CVE-2019-16782).	3 Apr 202008:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	26 Mar 202518:21	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Ruby on Rails affects IBM Cloud Pak for Multicloud Management Infrastructure Management	26 Jul 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to Rack ( CVE-2024-26141 )	21 May 202506:53	–	ibm
IBM Security Bulletins	Security Bulletin: Aspera on Cloud CVE-2020-8184	28 Sep 202020:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rack-2.0.7.gem	15 Apr 202503:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Rails	18 Jul 202006:08	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9 (CVE-2020-8164).	1 Oct 202013:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rack-2.0.7.gem	29 Apr 202416:12	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2019-16782
suse	www.suse.com/security/cve/CVE-2021-44528
bugzilla	www.bugzilla.suse.com/1173351
debian	www.debian.org/lts/security/2020/dla-2216
ubuntu	www.ubuntu.com/security/notices/USN-5253-1
suse	www.suse.com/security/cve/CVE-2021-22885
openwall	www.openwall.com/lists/oss-security/2019/12/18/3
osv	www.osv.dev/vulnerability/openSUSE-SU-2025:14875-1
suse	www.suse.com/security/cve/CVE-2023-27539
lists	www.lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html

13 Mar 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.3 - 10

CVSS 25.8

CVSS 36.1

CVSS 47.1

EPSS0.98507

SSVC