Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5881 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5881-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     March 17, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : rails     CVE ID         : CVE-2023-28362 CVE-2023-38037 CVE-2024-26144 CVE-2024-28103                      CVE-2024-41128 CVE-2024-47887 CVE-2024-47888 CVE-2024-47889                      CVE-2024-54133

    Multiple security issues were discovered in the Rails web framework     which could result cross-site scripting, information disclosure, denial     of service or bypass of content security policies.

    For the stable distribution (bookworm), these problems have been fixed in     version 2:6.1.7.10+dfsg-1~deb12u1.

    We recommend that you upgrade your rails packages.

    For the detailed security status of rails please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/rails

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session     information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the     user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache     the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7.
    (CVE-2024-26144)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session
    information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the
    user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache
    the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7.
    (CVE-2024-26144)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10806 advisory.

    Red Hat Satellite is a system management solution that allows organizations     to configure and maintain their systems without the necessity to provide     public Internet access to their servers or other client systems. It     performs provisioning and configuration management of predefined standard     operating environments.

    Security Fix(es):

    * rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage (CVE-2024-26144)
    * rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
    * rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
    * rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
    * python-ecdsa: vulnerable to the Minerva attack (CVE-2024-23342)

    Users of Red Hat Satellite are advised to upgrade to these updated     packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
232892	Debian dsa-5881 : rails - security update	Nessus	Debian Local Security Checks	high
232063	Linux Distros Unpatched Vulnerability : CVE-2024-26144	Nessus	Misc.	medium
412678	SCA: security update for activestorage (GHSA-8h22-8cf7-hq6g)	Tenable Cloud Security	SCA Checks	medium
412678	SCA: security update for activestorage (GHSA-8h22-8cf7-hq6g)	Tenable Self-Hosted Container Security	SCA Checks	medium
212072	RHEL 8 : Satellite 6.15.5 Async Update (Moderate) (RHSA-2024:10806)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2024-26144

medium

Tenable Plugins

high

medium

medium

medium

high