Protection Mechanism Failure in Ruby on Rails - CVE-2024-28103

Vulnerability identifier: #VU92084

CSH Severity: Low

CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-28103

CWE-ID: CWE-693

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to Action Pack set the configurable Permissions-Policy only for responses with an HTML related Content-Type. A remote attacker can bypass implemented security restrictions.

Ruby on Rails
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Enterprise Storage
Public Cloud Module
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Server Applications Module
openSUSE Leap
openEuler
rmt-server-debuginfo
rmt-server-debugsource
rmt-server
rmt-server-pubcloud
rmt-server-config
rubygem-actionpack
rubygem-actionpack-doc

Install updates from vendor's website.

Ruby on Rails - addressed in versions 6.1.7.8, 7.0.8.4, 7.1.3.4
rmt-server-debuginfo - addressed in versions 2.17-150200.3.45.1, 2.17-150300.3.37.1, 2.17-150400.3.25.1, 2.17-150500.3.16.1
rmt-server-debugsource - addressed in versions 2.17-150200.3.45.1, 2.17-150300.3.37.1, 2.17-150400.3.25.1, 2.17-150500.3.16.1
rmt-server - addressed in versions 2.17-150200.3.45.1, 2.17-150300.3.37.1, 2.17-150400.3.25.1, 2.17-150500.3.16.1
rmt-server-pubcloud - addressed in versions 2.17-150200.3.45.1, 2.17-150300.3.37.1, 2.17-150400.3.25.1, 2.17-150500.3.16.1
rmt-server-config - addressed in versions 2.17-150200.3.45.1, 2.17-150300.3.37.1, 2.17-150400.3.25.1, 2.17-150500.3.16.1
rubygem-actionpack - addressed in versions 6.1.4.1-5, 7.0.7-3
rubygem-actionpack-doc - addressed in versions 6.1.4.1-5, 7.0.7-3

• https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7
• https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523

• Multiple vulnerabilities in Ruby on Rails
• SUSE update for rmt-server
• SUSE update for rmt-server
• SUSE update for rmt-server
• openEuler 22.03 LTS SP1 update for rubygem-actionpack
• openEuler 22.03 LTS SP3 update for rubygem-actionpack
• openEuler 24.03 LTS update for rubygem-actionpack
• SUSE update for rmt-server