CVE-2019-16060 in Airbrake Ruby Notifier

요약

\~에 의해 MITRE

The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 예약하다: 2019. 09. 06.
• 모더레이션: 수락
• 항목: VDB-141347
• CPE: 준비됨
• CWE: CWE-255 (확인됨)
• CVSS: 9.8 (NVD)
• EPSS: 0.01442
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Insurance, Pharma, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-16060
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-16060
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-16060/