PT-2014-3266

CVE-2013-7134

·

Published

2014-04-29

·

Updated

2014-04-29

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Juvia (affected versions not specified)
Description The issue is related to Juvia using the same secret key for all installations. This allows remote attackers to have an unspecified impact by leveraging the secret key in the app/config/initializers/secret token.rb file, which is related to cookies.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
CWE-255
Related identifiers
CVE-2013-7134
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com