RSS   Vulnerabilities for 'Safemode'   RSS

2017-07-21
 
CVE-2017-7540

CWE-noinfo
 

 
rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

 
2016-05-20
 
CVE-2016-3693

CWE-264
 

 
The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.

 


Copyright 2024, cxsecurity.com

 

Back to Top