ubuntu · CVE-2016-6582

Quick triage

Priority: medium 公開: 2017-01-23 21:59:00 UTC Updated: 2025-08-25 22:08:16 UTC

参照: Official ubuntu advisory, NVD, CVE.org · CVE 詳細

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-6582 medium priority: Ubuntu including 1 source packages (ruby-doorkeeper), 21 status rows across 21 suites (artful, bionic, cosmic, disco, eoan, focal, groovy, hirsute, impish, jammy, kinetic, lunar, mantic, noble, oracular, precise, trusty, upstream, xenial, yakkety, zesty): not-affected 17, DNE 2, released 2.

Description:

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification.

cvelogic Threat Intelligence