Security Advisory

CVE-2020-8184

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-19 00:00:00
Last updated 2024-08-04 09:56:26
Assigner hackerone
State PUBLISHED

Description

A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.