Lucene search

K
rubygemsRubySecRUBY:REST-CLIENT-2015-1820-119878
HistoryMar 23, 2015 - 9:00 p.m.

CVE-2015-1820 rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses

2015-03-2321:00:00
RubySec
rubysec.com
9

REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers
to conduct session fixation attacks or obtain sensitive cookie information by leveraging
passage of cookies set in a response to a redirect.

CPENameOperatorVersion
rest-clientle1.6.0
rest-clientlt1.8.0