CVE-2018-16476
First published: Fri Nov 30 2018(Updated: )
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rubyonrails Rails | >=4.2.0<4.2.11 | |
| Rubyonrails Rails | >=5.0.0<5.0.7.1 | |
| Rubyonrails Rails | >=5.1.0<5.1.6.1 | |
| Rubyonrails Rails | >=5.2.0<5.2.1.1 | |
| Redhat Cloudforms | =4.6 | |
| redhat/activejob | <4.2.11 | 4.2.11 |
| redhat/activejob | <5.0.7.1 | 5.0.7.1 |
| redhat/activejob | <5.1.6.1 | 5.1.6.1 |
| redhat/activejob | <5.2.1.1 | 5.2.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2019:0600
- https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ
- https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1659224
- https://bugzilla.redhat.com/show_bug.cgi?id=1659223
Frequently Asked Questions
What is CVE-2018-16476?
CVE-2018-16476 is a Broken Access Control vulnerability in Active Job versions >= 4.2.0.
How does CVE-2018-16476 affect Ruby on Rails?
CVE-2018-16476 allows an attacker to craft user input that can give them unauthorized access to information in Active Job using GlobalId in Ruby on Rails.
How severe is CVE-2018-16476?
CVE-2018-16476 has a severity rating of 7.5 (High).
How can I fix CVE-2018-16476 in Active Job?
To fix CVE-2018-16476, update to one of the following versions: 4.2.11, 5.0.7.1, 5.1.6.1, or 5.2.1.1.
Where can I find more information about CVE-2018-16476?
You can find more information about CVE-2018-16476 on the following references: [link1], [link2], [link3].
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-16476
- agent/software-canonical-lookup
- vendor/rubyonrails
- canonical/rubyonrails rails
- version/rubyonrails rails/4.2.0
- version/rubyonrails rails/5.0.0
- version/rubyonrails rails/5.1.0
- version/rubyonrails rails/5.2.0
- vendor/redhat
- canonical/redhat cloudforms
- version/redhat cloudforms/4.6
- package-manager/redhat