A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-cloneUpgrade satellite-cliUpgrade rubygem-foreman_maintainUpgrade foreman-cli | Jan 19, 2023 | Dec 5, 2022 |
| Debian | — | Upgrade rails | Sep 6, 2022 | Sep 6, 2022 |
| Gentoo Linux | — | Upgrade dev-ruby/rails. | Aug 12, 2024 | Dec 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-apipie-bindingsUpgrade rubygem-localeUpgrade rubygem-jwtUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-gssapiUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-unfUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade rubygem-loggingUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade satellite-maintainUpgrade rubygem-hashieUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade rubygem-netrcUpgrade foreman-cliUpgrade rubygem-unf_ext-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-powerbarUpgrade rubygem-version_gemUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-cliUpgrade rubygem-domain_nameUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-types-data | Jan 19, 2023 | Dec 5, 2022 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxxUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Dec 5, 2022 |
| Suse | — | Upgrade ruby2.5-rubygem-activerecord-doc-5.2Upgrade ruby2.5-rubygem-activerecord-5.2 | Jan 12, 2023 | Dec 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub