VDB
BDU%3A2025-08594
BDU%3A2025-08594
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость программной платформы Ruby on Rails, связанная с неправильной авторизацией, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Rails Core Team, Сообщество свободного программного обеспечения, ООО «Ред Софт», Red Hat Inc. | OpenSUSE Leap, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Module for Server Applications, SUSE Linux Enterprise Module for Public Cloud, SUSE Enterprise Storage, SUSE Linux Enterprise High Performance Computing, Suse Linux Enterprise Server, openSUSE Tumbleweed, SUSE Manager Proxy, SUSE Manager Retail Branch Server, SUSE Manager Server, Ruby on Rails, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), Red Hat Satellite |
Timeline
- Jul 17, 2025 CVE Published
References
- https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-rubygem-actionpack-cve-2020-8164-cve-2020-8185-cve-2020-8166/?sphrase_id=1076181 advisory
- https://groups.google.com/g/rubyonrails-security/c/pAe9EV8gbM0 url
- https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-rubygem-actionpack-cve-2020-8164-cve-2020-8185-cve-2020-8166/?sphrase_id=1076181https://security-tracker.debian.org/tracker/CVE-2020-8185 url
- https://access.redhat.com/security/cve/CVE-2020-8185 url
- https://www.suse.com/security/cve/CVE-2020-8185.html url
- https://security-tracker.debian.org/tracker/CVE-2020-8185 advisory