CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2019/09/23 4:15 p.m.•18 views

CVE-2019-16377

The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control...

9.8CVSS9.6AI score0.02643EPSS

Exploits1References2

CVE•added 2019/09/23 3:8 p.m.•75 views

CVE-2019-16377

CVE-2019-16377 affects the makandra consul gem for Ruby (up to 1.0.2). The root cause is Incorrect/insufficient access control in controller power checks, where multiple :if/:except directives can cause skipped authentication, potentially allowing unauthorized access to controller actions. Affect...

9.8CVSS9.5AI score0.02643EPSS

Exploits1References2Affected Software1