vulnerability
SUSE: CVE-2020-8184: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Jun 19, 2020 | Nov 5, 2020 | Oct 22, 2021 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Jun 19, 2020
Added
Nov 5, 2020
Modified
Oct 22, 2021
Description
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
Solutions
suse-upgrade-rmt-serversuse-upgrade-rmt-server-configsuse-upgrade-rmt-server-pubcloud
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.