Oval Definition:	oval:com.ubuntu.trusty:def:201816476000
Revision Date: 2018-11-30 Version: 1 Title: CVE-2018-16476 on Ubuntu 14.04 LTS (trusty) - medium. Description: A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. Family: unix Class: vulnerability Status: Reference(s): CVE-2018-16476 Platform(s): Ubuntu 14.04 LTS Product(s): Definition Synopsis Ubuntu 14.04 LTS (trusty) is installed. AND Package Information NOT While related to the CVE in some way, the 'rails' package in trusty is not affected (note: 'contains no code'). OR NOT While related to the CVE in some way, the 'rails-4.0' package in trusty is not affected. OR The vulnerability of the 'ruby-actionpack-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activemodel-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activerecord-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activesupport-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR NOT While related to the CVE in some way, the 'ruby-rails-3.2' package in trusty is not affected.
BACK