CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-7576

The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to bypass authentication by measuring timing differences.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.016

EPSS Ranking 80.7%

CVSS Severity

CVSS v3 Score 3.7

CVSS v2 Score 4.3

References

Products affected by CVE-2015-7576

Rubyonrails » Rails » Version: 4.0.0

cpe:2.3:a:rubyonrails:rails:4.0.0
Rubyonrails » Rails » Version: 4.0.1

cpe:2.3:a:rubyonrails:rails:4.0.1
Rubyonrails » Rails » Version: 4.0.10

cpe:2.3:a:rubyonrails:rails:4.0.10
Rubyonrails » Rails » Version: 4.0.2

cpe:2.3:a:rubyonrails:rails:4.0.2
Rubyonrails » Rails » Version: 4.0.3

cpe:2.3:a:rubyonrails:rails:4.0.3
Rubyonrails » Rails » Version: 4.0.4

cpe:2.3:a:rubyonrails:rails:4.0.4
Rubyonrails » Rails » Version: 4.0.5

cpe:2.3:a:rubyonrails:rails:4.0.5
Rubyonrails » Rails » Version: 4.0.6

cpe:2.3:a:rubyonrails:rails:4.0.6
Rubyonrails » Rails » Version: 4.0.7

cpe:2.3:a:rubyonrails:rails:4.0.7
Rubyonrails » Rails » Version: 4.0.8

cpe:2.3:a:rubyonrails:rails:4.0.8
Rubyonrails » Rails » Version: 4.0.9

cpe:2.3:a:rubyonrails:rails:4.0.9
Rubyonrails » Rails » Version: 4.1.0

cpe:2.3:a:rubyonrails:rails:4.1.0
Rubyonrails » Rails » Version: 4.1.1

cpe:2.3:a:rubyonrails:rails:4.1.1
Rubyonrails » Rails » Version: 4.1.10

cpe:2.3:a:rubyonrails:rails:4.1.10
Rubyonrails » Rails » Version: 4.1.12

cpe:2.3:a:rubyonrails:rails:4.1.12
Rubyonrails » Rails » Version: 4.1.13

cpe:2.3:a:rubyonrails:rails:4.1.13
Rubyonrails » Rails » Version: 4.1.14

cpe:2.3:a:rubyonrails:rails:4.1.14
Rubyonrails » Rails » Version: 4.1.2

cpe:2.3:a:rubyonrails:rails:4.1.2
Rubyonrails » Rails » Version: 4.1.3

cpe:2.3:a:rubyonrails:rails:4.1.3
Rubyonrails » Rails » Version: 4.1.4

cpe:2.3:a:rubyonrails:rails:4.1.4
Rubyonrails » Rails » Version: 4.1.5

cpe:2.3:a:rubyonrails:rails:4.1.5
Rubyonrails » Rails » Version: 4.1.6

cpe:2.3:a:rubyonrails:rails:4.1.6
Rubyonrails » Rails » Version: 4.1.7

cpe:2.3:a:rubyonrails:rails:4.1.7
Rubyonrails » Rails » Version: 4.1.7.1

cpe:2.3:a:rubyonrails:rails:4.1.7.1
Rubyonrails » Rails » Version: 4.1.8

cpe:2.3:a:rubyonrails:rails:4.1.8
Rubyonrails » Rails » Version: 4.1.9

cpe:2.3:a:rubyonrails:rails:4.1.9
Rubyonrails » Rails » Version: 4.2.0

cpe:2.3:a:rubyonrails:rails:4.2.0
Rubyonrails » Rails » Version: 4.2.1

cpe:2.3:a:rubyonrails:rails:4.2.1
Rubyonrails » Rails » Version: 4.2.2

cpe:2.3:a:rubyonrails:rails:4.2.2
Rubyonrails » Rails » Version: 4.2.3

cpe:2.3:a:rubyonrails:rails:4.2.3
Rubyonrails » Rails » Version: 4.2.4

cpe:2.3:a:rubyonrails:rails:4.2.4
Rubyonrails » Rails » Version: 4.2.5

cpe:2.3:a:rubyonrails:rails:4.2.5
Rubyonrails » Rails » Version: 5.0.0

cpe:2.3:a:rubyonrails:rails:5.0.0
Rubyonrails » Ruby On Rails » Version: 0.10.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.10.0
Rubyonrails » Ruby On Rails » Version: 0.10.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.10.1
Rubyonrails » Ruby On Rails » Version: 0.11.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.11.0
Rubyonrails » Ruby On Rails » Version: 0.11.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.11.1
Rubyonrails » Ruby On Rails » Version: 0.12.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.12.0
Rubyonrails » Ruby On Rails » Version: 0.12.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.12.1
Rubyonrails » Ruby On Rails » Version: 0.13.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.13.0
Rubyonrails » Ruby On Rails » Version: 0.13.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.13.1
Rubyonrails » Ruby On Rails » Version: 0.14.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.1
Rubyonrails » Ruby On Rails » Version: 0.14.2

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.2
Rubyonrails » Ruby On Rails » Version: 0.14.3

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.3
Rubyonrails » Ruby On Rails » Version: 0.14.4

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.4
Rubyonrails » Ruby On Rails » Version: 0.5.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0
Rubyonrails » Ruby On Rails » Version: 0.5.5

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5
Rubyonrails » Ruby On Rails » Version: 0.5.6

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6
Rubyonrails » Ruby On Rails » Version: 0.5.7

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7
Rubyonrails » Ruby On Rails » Version: 0.6.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0
Rubyonrails » Ruby On Rails » Version: 0.6.5

cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5
Rubyonrails » Ruby On Rails » Version: 0.7.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0
Rubyonrails » Ruby On Rails » Version: 0.8.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0
Rubyonrails » Ruby On Rails » Version: 0.8.5

cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5
Rubyonrails » Ruby On Rails » Version: 0.9.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0
Rubyonrails » Ruby On Rails » Version: 0.9.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.1
Rubyonrails » Ruby On Rails » Version: 0.9.2

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.2
Rubyonrails » Ruby On Rails » Version: 0.9.3

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.3
Rubyonrails » Ruby On Rails » Version: 0.9.4

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.4
Rubyonrails » Ruby On Rails » Version: 0.9.4.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.4.1
Rubyonrails » Ruby On Rails » Version: 1.0.0

cpe:2.3:a:rubyonrails:ruby_on_rails:1.0.0
Rubyonrails » Ruby On Rails » Version: 1.1.0

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.0
Rubyonrails » Ruby On Rails » Version: 1.1.1

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.1
Rubyonrails » Ruby On Rails » Version: 1.1.2

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.2
Rubyonrails » Ruby On Rails » Version: 1.1.3

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.3
Rubyonrails » Ruby On Rails » Version: 1.1.4

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.4
Rubyonrails » Ruby On Rails » Version: 1.1.5

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.5
Rubyonrails » Ruby On Rails » Version: 1.1.6

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.6
Rubyonrails » Ruby On Rails » Version: 1.2.0

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.0
Rubyonrails » Ruby On Rails » Version: 1.2.1

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.1
Rubyonrails » Ruby On Rails » Version: 1.2.2

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.2
Rubyonrails » Ruby On Rails » Version: 1.2.3

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.3
Rubyonrails » Ruby On Rails » Version: 1.2.4

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.4
Rubyonrails » Ruby On Rails » Version: 1.2.5

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.5
Rubyonrails » Ruby On Rails » Version: 1.2.6

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.6
Rubyonrails » Ruby On Rails » Version: 1.9.3

cpe:2.3:a:rubyonrails:ruby_on_rails:1.9.3
Rubyonrails » Ruby On Rails » Version: 1.9.5

cpe:2.3:a:rubyonrails:ruby_on_rails:1.9.5
Rubyonrails » Ruby On Rails » Version: 2.0.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.0
Rubyonrails » Ruby On Rails » Version: 2.0.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.1
Rubyonrails » Ruby On Rails » Version: 2.0.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.2
Rubyonrails » Ruby On Rails » Version: 2.0.4

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.4
Rubyonrails » Ruby On Rails » Version: 2.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1
Rubyonrails » Ruby On Rails » Version: 2.1.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1.0
Rubyonrails » Ruby On Rails » Version: 2.1.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1.1
Rubyonrails » Ruby On Rails » Version: 2.1.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1.2
Rubyonrails » Ruby On Rails » Version: 2.2.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.2.0
Rubyonrails » Ruby On Rails » Version: 2.2.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.2.1
Rubyonrails » Ruby On Rails » Version: 2.2.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.2.2
Rubyonrails » Ruby On Rails » Version: 2.3.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.0
Rubyonrails » Ruby On Rails » Version: 2.3.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.1
Rubyonrails » Ruby On Rails » Version: 2.3.10

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.10
Rubyonrails » Ruby On Rails » Version: 2.3.11

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.11
Rubyonrails » Ruby On Rails » Version: 2.3.12

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.12
Rubyonrails » Ruby On Rails » Version: 2.3.13

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.13
Rubyonrails » Ruby On Rails » Version: 2.3.14

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.14
Rubyonrails » Ruby On Rails » Version: 2.3.15

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.15
Rubyonrails » Ruby On Rails » Version: 2.3.16

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.16
Rubyonrails » Ruby On Rails » Version: 2.3.18

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.18
Rubyonrails » Ruby On Rails » Version: 2.3.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.2
Rubyonrails » Ruby On Rails » Version: 2.3.3

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.3
Rubyonrails » Ruby On Rails » Version: 2.3.4

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.4
Rubyonrails » Ruby On Rails » Version: 2.3.9

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.9
Rubyonrails » Ruby On Rails » Version: 3.0

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0
Rubyonrails » Ruby On Rails » Version: 3.0.0

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.0
Rubyonrails » Ruby On Rails » Version: 3.0.1

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.1
Rubyonrails » Ruby On Rails » Version: 3.0.10

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.10
Rubyonrails » Ruby On Rails » Version: 3.0.11

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.11
Rubyonrails » Ruby On Rails » Version: 3.0.12

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.12
Rubyonrails » Ruby On Rails » Version: 3.0.13

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.13
Rubyonrails » Ruby On Rails » Version: 3.0.14

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.14
Rubyonrails » Ruby On Rails » Version: 3.0.16

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.16
Rubyonrails » Ruby On Rails » Version: 3.0.17

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.17
Rubyonrails » Ruby On Rails » Version: 3.0.18

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.18
Rubyonrails » Ruby On Rails » Version: 3.0.19

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.19
Rubyonrails » Ruby On Rails » Version: 3.0.2

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.2
Rubyonrails » Ruby On Rails » Version: 3.0.20

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.20
Rubyonrails » Ruby On Rails » Version: 3.0.3

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.3
Rubyonrails » Ruby On Rails » Version: 3.0.4

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4
Rubyonrails » Ruby On Rails » Version: 3.0.5

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.5
Rubyonrails » Ruby On Rails » Version: 3.0.6

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.6
Rubyonrails » Ruby On Rails » Version: 3.0.7

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.7
Rubyonrails » Ruby On Rails » Version: 3.0.8

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.8
Rubyonrails » Ruby On Rails » Version: 3.0.9

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.9
Rubyonrails » Ruby On Rails » Version: 3.1.0

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.0
Rubyonrails » Ruby On Rails » Version: 3.1.1

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.1
Rubyonrails » Ruby On Rails » Version: 3.1.10

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.10
Rubyonrails » Ruby On Rails » Version: 3.1.12

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.12
Rubyonrails » Ruby On Rails » Version: 3.1.2

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.2
Rubyonrails » Ruby On Rails » Version: 3.1.2rc1

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.2rc1
Rubyonrails » Ruby On Rails » Version: 3.1.3

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.3
Rubyonrails » Ruby On Rails » Version: 3.1.4

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.4
Rubyonrails » Ruby On Rails » Version: 3.1.5

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.5
Rubyonrails » Ruby On Rails » Version: 3.1.6

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.6
Rubyonrails » Ruby On Rails » Version: 3.1.7

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.7
Rubyonrails » Ruby On Rails » Version: 3.1.8

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.8
Rubyonrails » Ruby On Rails » Version: 3.1.9

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.9
Rubyonrails » Ruby On Rails » Version: 3.2.0

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.0
Rubyonrails » Ruby On Rails » Version: 3.2.1

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.1
Rubyonrails » Ruby On Rails » Version: 3.2.10

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.10
Rubyonrails » Ruby On Rails » Version: 3.2.11

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.11
Rubyonrails » Ruby On Rails » Version: 3.2.12

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.12
Rubyonrails » Ruby On Rails » Version: 3.2.13

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.13
Rubyonrails » Ruby On Rails » Version: 3.2.15

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.15
Rubyonrails » Ruby On Rails » Version: 3.2.16

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.16
Rubyonrails » Ruby On Rails » Version: 3.2.17

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.17
Rubyonrails » Ruby On Rails » Version: 3.2.18

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.18
Rubyonrails » Ruby On Rails » Version: 3.2.2

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.2
Rubyonrails » Ruby On Rails » Version: 3.2.21

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.21
Rubyonrails » Ruby On Rails » Version: 3.2.3

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.3
Rubyonrails » Ruby On Rails » Version: 3.2.4

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.4
Rubyonrails » Ruby On Rails » Version: 3.2.5

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.5
Rubyonrails » Ruby On Rails » Version: 3.2.6

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.6
Rubyonrails » Ruby On Rails » Version: 3.2.7

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.7
Rubyonrails » Ruby On Rails » Version: 3.2.8

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.8
Rubyonrails » Ruby On Rails » Version: 3.2.9

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.9
Rubyonrails » Ruby On Rails » Version: 4.0.10

cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.10
Rubyonrails » Ruby On Rails » Version: 4.0.11

cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11
Rubyonrails » Ruby On Rails » Version: 4.0.11.1

cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11.1
Rubyonrails » Ruby On Rails » Version: 4.0.12

cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.12
Rubyonrails » Ruby On Rails » Version: 4.0.13

cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.13
Rubyonrails » Ruby On Rails » Version: 4.1.11

cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.11

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-7576

Products

Pricing

Contact Us