CVE-2016-6582 Doorkeeper is vulnerable to replay attacks
CriticalCVSS 9.1
EPSS 4.8%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems doorkeeper(RubyGems) | < 4.2.0 | 4.2.0 |
| rubygems doorkeeper(RubyGems) | = 0.1.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.1.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.2.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.3.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.3.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.3.2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.3.3 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.3.4 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.4.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.4.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.4.2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.5.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.5.0.rc1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.0.rc1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.3 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.4 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.5 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.6 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.6.7 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.7.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.7.1 | No fix listed |
Show 41 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems doorkeeper(RubyGems) | = 0.7.2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.7.3 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 0.7.4 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.0.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.0.0.rc1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.0.0.rc2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.1.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.2.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.3.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.3.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.4.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.4.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 1.4.2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.0.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.0.0.alpha1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.0.0.rc2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.0.0.rc3 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.0.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.1.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.1.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.1.2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.1.3 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.1.4 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.2.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.2.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 2.2.2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 3.0.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 3.0.0.rc1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 3.0.0.rc2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 3.0.1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 3.1.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 4.0.0 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 4.0.0.rc1 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 4.0.0.rc2 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 4.0.0.rc3 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 4.0.0.rc4 | No fix listed |
| rubygems doorkeeper(RubyGems) | = 4.1.0 | No fix listed |
| debian/ruby-doorkeeper(Debian:12) | < 4.2.0-3 | 4.2.0-3 |
| debian/ruby-doorkeeper(Debian:13) | < 4.2.0-3 | 4.2.0-3 |
| debian/ruby-doorkeeper(Debian:14) | < 4.2.0-3 | 4.2.0-3 |
| doorkeeper project doorkeeper | <= 4.1.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking patch third-party-advisory
- github.com vendor-advisory
- github.com issue-tracking patch release-notes third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160822 [CVE-2016-6582] Doorkeeper gem does not revoke tokens & uses wrong auth/auth method mailing-list patch third-party-advisory
- github.com exploit
- web.archive.org
- web.archive.org
- www.openwall.com
- github.com
- Debian Security Tracker CVE-2016-6582 vendor-advisory
- 20160818 [CVE-2016-6582] Doorkeeper gem does not revoke tokens & uses wrong auth/auth method mailing-list
- 92551 third-party-advisory vdb-entry
- bugs.debian.org issue-tracking