Lucene search
+L

3 matches found

Veracode
Veracode
added 2024/01/05 10:27 a.m.21 views

Race Condition

Audited is vulnerable to Race Condition. The vulnerability is caused due lack of proper synchronization mechanisms during the use of Thread.current. This potentially leads to logging of wrong username in an audit log...

3.1CVSS6.7AI score0.00494EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
added 2023/05/08 2:55 a.m.16 views

Race Condition

audited is vulnerable to a Race Condition. The vulnerability exists in the store function of audited.rb as it can incorrectly attribute audits to the wrong user because of the usage of Thread.current...

6.7AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2023/05/01 2:0 p.m.33 views

Race Condition leading to logging errors

In certain setups with threaded web servers, Audited's use of Thread.current can incorrectly attributed audits to the wrong user. Fixed in 5.3.3. In March, @convisoappsec noticed that the library in question had a Race Condition problem, which caused logs to be registered at times with different...

3.1CVSS6.7AI score0.00494EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder