CVE-2012-2671

Published: Jun 17, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache.

Affected (10)

Products: Rtomayko: Rack Cach

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Rtomayko Rack Cach	Version 0.3.0
Rtomayko Rack Cach	Version 0.4
Rtomayko Rack Cach	Version 0.5.2
Rtomayko Rack Cach	Version 0.5.3
Rtomayko Rack Cach	Version 0.5
Rtomayko Rack Cach	Version 1.0.1
Rtomayko Rack Cach	Version 1.0.2
Rtomayko Rack Cach	Version 1.0.3
Rtomayko Rack Cach	Version 1.0
Rtomayko Rack Cach	Version 1.1

References (16)

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081812.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/06/06/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/06/06/8

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=763650

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=824520

Source: secalert@redhat.com

https://github.com/rtomayko/rack-cache/blob/master/CHANGES

Source: secalert@redhat.com

https://github.com/rtomayko/rack-cache/commit/2e3a64d07daac4c757cc57620f2288e865a09b90

Source: secalert@redhat.com

https://github.com/rtomayko/rack-cache/pull/52

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081812.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/06/06/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/06/06/8

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.novell.com/show_bug.cgi?id=763650

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=824520

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/rtomayko/rack-cache/blob/master/CHANGES

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/rtomayko/rack-cache/commit/2e3a64d07daac4c757cc57620f2288e865a09b90

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/rtomayko/rack-cache/pull/52

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.