CVE-2009-2422

Description

The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.

Weakness classification

• CWE-287: Improper Authentication

Primary references

• cve@mitre.org — Mailing List
• cve@mitre.org — Exploit, Patch
• cve@mitre.org — Broken Link, Vendor Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Patch
• cve@mitre.org — Broken Link, Patch, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link, Patch, Vendor Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory