CVE Catalog
CVE-2016-6582
CriticalSummary
The Doorkeeper gem before version 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens due to failure to implement the OAuth 2.0 Token Revocation specification.
Risk Assessment
The organization may be exposed to attacks that allow unauthorized use of tokens, potentially leading to data loss or unauthorized access to resources.
Recommendation
It is recommended to update the Doorkeeper gem to version 4.2.0 or later to implement the necessary security measures in accordance with OAuth 2.0.
Original NVD description (English source)
The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification.