EUVD-2019-0660

Malware in sbrugna...

CVE-2019-16377

The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control...

Improper access control

The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control...

CVE-2019-16377

The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control...

CVE-2019-16377

CVE-2019-16377 affects the makandra consul gem for Ruby (up to 1.0.2). The root cause is Incorrect/insufficient access control in controller power checks, where multiple :if/:except directives can cause skipped authentication, potentially allowing unauthorized access to controller actions. Affect...