A vulnerability was found in Rack Module up to 2.2.2/2.1.3 on Ruby on Rails. It has been rated as critical. This issue affects an unknown code of the component Cookie Handler. The manipulation with an unknown input leads to a reliance on cookies without validation and integrity checking in a security decision vulnerability. Using CWE to declare the problem leads to CWE-784. The product uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.

The weakness was shared 06/19/2020 (Website). The advisory is shared at groups.google.com. The identification of this vulnerability is CVE-2020-8184 since 01/28/2020. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available.

Upgrading to version 2.2.3 or 2.1.4 eliminates this vulnerability.

Productinfo

Name

• Rack Module

Version

• 2.1.0
• 2.1.1
• 2.1.2
• 2.1.3
• 2.2.0
• 2.2.1
• 2.2.2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion