Oval Definition:	oval:com.ubuntu.trusty:def:20195420000
Revision Date: 2019-03-27 Version: 1 Title: CVE-2019-5420 on Ubuntu 14.04 LTS (trusty) - medium. Description: A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-5420 Platform(s): Ubuntu 14.04 LTS Product(s): Definition Synopsis Ubuntu 14.04 LTS (trusty) is installed. AND Package Information NOT While related to the CVE in some way, the 'rails' package in trusty is not affected (note: 'contains no code'). OR The vulnerability of the 'rails-4.0' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-actionpack-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activemodel-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activerecord-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activesupport-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-rails-3.2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation.
BACK