CVE-2008-7311 Spree uses a hardcoded hash value
MediumCVSS 5.0
EPSS 1.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the config/environment.rb file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems spree(RubyGems) | < 0.4.0 | 0.4.0 |
| rubygems spree(RubyGems) | = 0.0.5 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.6 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.7 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.8 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.9 | No fix listed |
| rubygems spree(RubyGems) | = 0.2.0 | No fix listed |
| spreecommerce spree | = 0.2.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- web.archive.org
- web.archive.org
- web.archive.org
- github.com exploit
- spreecommerce.com
- spreecommerce.com vendor-advisory
- github.com
- github.com product
- support.spreehq.org