CVE-2009-2422 rails vulnerable to improper authentication
Attackers can bypass authentication in Ruby on Rails applications using the vulnerable example digest authentication code by sending an invalid username without a password.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-2422?
CVE-2009-2422 is a critical authentication bypass vulnerability in Apple Mac Os X, published on 10 Jul 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.
Weakness: CWE-287
Which versions are affected by CVE-2009-2422?
2 open source packages ship an affected version, including rails. It affects 3 products.
| Package | Affected | Fixed in |
|---|---|---|
rails RubyGems | All versions | 2.3.3 |
rails RubyGems | All versions | 2.3.3 |
Products include Apple Mac Os X, Apple Mac Os X Server, Rubyonrails Ruby on Rails.
How do I fix CVE-2009-2422?
Upgrade rails to 2.3.3 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2009-2422 being exploited?
There is no known exploitation of CVE-2009-2422 in the wild and no public exploit code.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as DEBIAN-CVE-2009-2422, GHSA-rxq3-gm4p-5fj4.