← Database

CVE-2004-0755

LOW CVSS: 2.1 Published: 2004-10-20 Modified: 2026-06-16

Description

The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.

Affected Platforms

Yukihiro Matsumoto Ruby

Weakness Type

NVD-CWE-Other

References