CVE-2004-0755 describes a vulnerability in the FileStore capability of CGI::Session for Ruby versions prior to 1.8.1, and potentially PStore, where session files are created with insecure permissions. This flaw allows local attackers to access sensitive session information and hijack user sessions. The vulnerability has a low severity CVSS score of 2.1, indicating a local attack vector with low complexity and a potential impact of partial confidentiality loss. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the CVE has garnered significant community discussion with 10 mentions, primarily on GitHub.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.6CPE matchmatch criteria | cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:* | ||
1.8CPE matchmatch criteria | cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.