Devise CVE-2013-0233 Security Bypass Vulnerability
BID:57577
Info
Devise CVE-2013-0233 Security Bypass Vulnerability
| Bugtraq ID: | 57577 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-0233 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2013 12:00AM |
| Updated: | Mar 04 2013 12:44PM |
| Credit: | Joernchen of Phenoelit |
| Vulnerable: |
openSUSE openSUSE 12.2 |
| Not Vulnerable: | |
Discussion
Devise CVE-2013-0233 Security Bypass Vulnerability
Devise is prone to a security-bypass vulnerability.
Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Devise is prone to a security-bypass vulnerability.
Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Exploit / POC
Devise CVE-2013-0233 Security Bypass Vulnerability
Currently, we are not aware of any publicly available exploits. If you feel we are in error of if you are aware of any more recent information, please mail us at: [email protected].
Currently, we are not aware of any publicly available exploits. If you feel we are in error of if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
Devise CVE-2013-0233 Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Devise CVE-2013-0233 Security Bypass Vulnerability
References:
References: