3 matches found
Race Condition
Audited is vulnerable to Race Condition. The vulnerability is caused due lack of proper synchronization mechanisms during the use of Thread.current. This potentially leads to logging of wrong username in an audit log...
Race Condition
audited is vulnerable to a Race Condition. The vulnerability exists in the store function of audited.rb as it can incorrectly attribute audits to the wrong user because of the usage of Thread.current...
Race Condition leading to logging errors
In certain setups with threaded web servers, Audited's use of Thread.current can incorrectly attributed audits to the wrong user. Fixed in 5.3.3. In March, @convisoappsec noticed that the library in question had a Race Condition problem, which caused logs to be registered at times with different...