CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0263

Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.08

EPSS Ranking 91.6%

CVSS Severity

CVSS v2 Score 5.1

References

Products affected by CVE-2013-0263

Rack Project » Rack » Version: 1.1.0

cpe:2.3:a:rack_project:rack:1.1.0
Rack Project » Rack » Version: 1.1.4

cpe:2.3:a:rack_project:rack:1.1.4
Rack Project » Rack » Version: 1.1.5

cpe:2.3:a:rack_project:rack:1.1.5
Rack Project » Rack » Version: 1.1.6

cpe:2.3:a:rack_project:rack:1.1.6
Rack Project » Rack » Version: 1.2.0

cpe:2.3:a:rack_project:rack:1.2.0
Rack Project » Rack » Version: 1.2.1

cpe:2.3:a:rack_project:rack:1.2.1
Rack Project » Rack » Version: 1.2.2

cpe:2.3:a:rack_project:rack:1.2.2
Rack Project » Rack » Version: 1.2.3

cpe:2.3:a:rack_project:rack:1.2.3
Rack Project » Rack » Version: 1.2.4

cpe:2.3:a:rack_project:rack:1.2.4
Rack Project » Rack » Version: 1.2.6

cpe:2.3:a:rack_project:rack:1.2.6
Rack Project » Rack » Version: 1.2.7

cpe:2.3:a:rack_project:rack:1.2.7
Rack Project » Rack » Version: 1.3.0

cpe:2.3:a:rack_project:rack:1.3.0
Rack Project » Rack » Version: 1.3.1

cpe:2.3:a:rack_project:rack:1.3.1
Rack Project » Rack » Version: 1.3.2

cpe:2.3:a:rack_project:rack:1.3.2
Rack Project » Rack » Version: 1.3.3

cpe:2.3:a:rack_project:rack:1.3.3
Rack Project » Rack » Version: 1.3.4

cpe:2.3:a:rack_project:rack:1.3.4
Rack Project » Rack » Version: 1.3.5

cpe:2.3:a:rack_project:rack:1.3.5
Rack Project » Rack » Version: 1.3.6

cpe:2.3:a:rack_project:rack:1.3.6
Rack Project » Rack » Version: 1.3.7

cpe:2.3:a:rack_project:rack:1.3.7
Rack Project » Rack » Version: 1.3.8

cpe:2.3:a:rack_project:rack:1.3.8
Rack Project » Rack » Version: 1.3.9

cpe:2.3:a:rack_project:rack:1.3.9
Rack Project » Rack » Version: 1.4.0

cpe:2.3:a:rack_project:rack:1.4.0
Rack Project » Rack » Version: 1.4.1

cpe:2.3:a:rack_project:rack:1.4.1
Rack Project » Rack » Version: 1.4.2

cpe:2.3:a:rack_project:rack:1.4.2
Rack Project » Rack » Version: 1.4.3

cpe:2.3:a:rack_project:rack:1.4.3
Rack Project » Rack » Version: 1.4.4

cpe:2.3:a:rack_project:rack:1.4.4
Rack Project » Rack » Version: 1.5.0

cpe:2.3:a:rack_project:rack:1.5.0
Rack Project » Rack » Version: 1.5.1

cpe:2.3:a:rack_project:rack:1.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0263

Products

Pricing

Contact Us