Lucene search
+L

5 matches found

NVD
NVD
•added 2014/04/29 2:38 p.m.•18 views

CVE-2013-7134

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secrettoken.rb, related to cookies...

7.5CVSS7AI score0.02331EPSS
SaveExploits0References3
Prion
Prion
•added 2014/04/29 2:38 p.m.•20 views

Design/Logic Flaw

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secrettoken.rb, related to cookies...

7.5CVSS7.6AI score0.02331EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2014/04/29 2:00 p.m.•31 views

CVE-2013-7134

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secrettoken.rb, related to cookies...

7AI score0.02331EPSS
SaveExploits0References3
CVE
CVE
•added 2014/04/29 2:00 p.m.•51 views

CVE-2013-7134

CVE-2013-7134 affects Juvia; vulnerability arises from using the same secret key across installations, allowing remote attackers to leverage the secret_token.rb in cookies with unspecified impact. The provided documents state the issue and linked references but do not supply concrete exploit deta...

7.5CVSS7.2AI score0.02331EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/29 12:00 a.m.•6 views

CVE-2013-7134: Undefined Security Weakness

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secrettoken.rb, related to cookies...

7.5CVSS6AI score0.02331EPSS
SaveExploits0References2
Rows per page
Query Builder