Vulnerability Description
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rubyonrails | Rails | >= 4.2.0, < 4.2.11 |
| Redhat | Cloudforms | 4.6 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2019:0600Third Party Advisory
- https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJExploitMailing ListMitigation
- https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-releasVendor Advisory
- https://access.redhat.com/errata/RHSA-2019:0600Third Party Advisory
- https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJExploitMailing ListMitigation
- https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-releasVendor Advisory
FAQ
What is CVE-2018-16476?
CVE-2018-16476 is a vulnerability with a CVSS score of 7.5 (HIGH). A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to informa...
How severe is CVE-2018-16476?
CVE-2018-16476 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-16476?
Check the references section above for vendor advisories and patch information. Affected products include: Rubyonrails Rails, Redhat Cloudforms.