NVD

Id
49667  
Name
CVE-2009-2422  
Description
The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-07-10  
Modified Date
2010-04-01  
Seq
2009-2422  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251093 49667 CVE-2009-2422 APPLE-SA-2010-03-29-1  View
251094 49667 CVE-2009-2422 http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s  View
251095 49667 CVE-2009-2422 http://support.apple.com/kb/HT4077  View
251096 49667 CVE-2009-2422 http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest  View
251097 49667 CVE-2009-2422 35579  View
251098 49667 CVE-2009-2422 ADV-2009-1802  View
251099 49667 CVE-2009-2422 rubyonrails-validatedigest-sec-bypass(51528)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41519 JVNDB-2009-002526 Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 Ruby on Rails のダイジェスト認証の機能の事例コードには、ユーザが存在しない場合の authenticate_or_request_with_http_digest 定義に関して不備があるため、パスワードなしの無効なユーザ名を送信することでアプリケーションの認証を回避される脆弱性が存在します。 CVE-2009-2422 39853 CVE-2009-2422 49667 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002526.html 2009-07-10 2010-04-16 View