ubuntu · CVE-2016-6582

Quick triage

Priority: medium Published: 2017-01-23 21:59:00 UTC Updated: 2025-08-25 22:08:16 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-6582 medium priority: Ubuntu including 1 source packages (ruby-doorkeeper), 21 status rows across 21 suites (artful, bionic, cosmic, disco, eoan, focal, groovy, hirsute, impish, jammy, kinetic, lunar, mantic, noble, oracular, precise, trusty, upstream, xenial, yakkety, zesty): not-affected 17, DNE 2, released 2.

Description:

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification.

cvelogic Threat Intelligence