CVE-2009-3086

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-08 · updated 2026-06-16
Weakness: CWE-200

Description

A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.

Affected products

Ruby on Rails: 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, 2.2.2 (+2)

References

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
http://secunia.com/advisories/36600
http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails
http://www.debian.org/security/2011/dsa-2260
http://www.securityfocus.com/bid/37427
http://www.vupen.com/english/advisories/2009/2544
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
http://secunia.com/advisories/36600
http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails
http://www.debian.org/security/2011/dsa-2260
http://www.securityfocus.com/bid/37427
http://www.vupen.com/english/advisories/2009/2544

Get alerted when CVE-2009-3086 or the next vulnerability affects your stack