CVE

Id
67081  
CVE No.
CVE-2013-7134  
Status
Candidate  
Description
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.  
Phase
Assigned (20131217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
648224 67081 CVE-2013-7134 MLIST:[oss-security] 20131216 CVE request: Juvia secret token handling  View
648225 67081 CVE-2013-7134 URL:http://www.openwall.com/lists/oss-security/2013/12/16/3  View
648226 67081 CVE-2013-7134 MLIST:[oss-security] 20131217 Re: CVE request: Juvia secret token handling  View
648227 67081 CVE-2013-7134 URL:http://www.openwall.com/lists/oss-security/2013/12/18/1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24250 JVNDB-2013-005825 Horizon Quick Content Management System の download.php における SQL インジェクションの脆弱性 Horizon Quick Content Management System (QCMS) の download.php には、SQL インジェクションの脆弱性が存在します。 CVE-2013-7139 67081 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005825.html  View