CVE Catalog
CVE-2015-1820
CriticalSummary
The REST client for Ruby (rest-client) before version 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging the passage of cookies set in a response to a redirect.
Risk Assessment
Attackers may hijack user sessions or gain access to sensitive data, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update the REST client to version 1.8.0 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.