CVE-2004-0755: Yukihiro Matsumoto Ruby

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.

Affected products

• Yukihiro Matsumoto Ruby: version 1.6 only; version 1.8 only

Published 2004-10-20. Last modified 2026-06-16.