Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on Rails, concerning insecure file permissions. This vulnerability is of moderate severity due to the potential for unauthorized write access to particular Ruby files managed by the library. Such access could lead to the alteration of application behavior or data integrity issues. Users of affected versions are advised to update to Kaminari version 0.16.2 or later, where file permissions have been adjusted to enhance security. If upgrading is not feasible immediately, review and adjust the file permissions for particular Ruby files in Kaminari to ensure they are only accessible by authorized user.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability     involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on     Rails, concerning insecure file permissions. This vulnerability is of moderate severity due to the     potential for unauthorized write access to particular Ruby files managed by the library. Such access could     lead to the alteration of application behavior or data integrity issues. Users of affected versions are     advised to update to Kaminari version 0.16.2 or later, where file permissions have been adjusted to     enhance security. If upgrading is not feasible immediately, review and adjust the file permissions for     particular Ruby files in Kaminari to ensure they are only accessible by authorized user. (CVE-2024-32978)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability
    involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on
    Rails, concerning insecure file permissions. This vulnerability is of moderate severity due to the
    potential for unauthorized write access to particular Ruby files managed by the library. Such access could
    lead to the alteration of application behavior or data integrity issues. Users of affected versions are
    advised to update to Kaminari version 0.16.2 or later, where file permissions have been adjusted to
    enhance security. If upgrading is not feasible immediately, review and adjust the file permissions for
    particular Ruby files in Kaminari to ensure they are only accessible by authorized user. (CVE-2024-32978)

ID	Name	Product	Family	Severity
250589	Linux Distros Unpatched Vulnerability : CVE-2024-32978	Nessus	Misc.	medium
412225	SCA: security update for kaminari (GHSA-7r3j-qmr4-jfpj)	Tenable Cloud Security	SCA Checks	medium
412225	SCA: security update for kaminari (GHSA-7r3j-qmr4-jfpj)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2024-32978

medium

Tenable Plugins

medium

medium

medium