| Package | Affected versions | Patched versions |
|---|---|---|
| ruby | = 1.6= 1.8 |
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free