CVE-2014-4997 - lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process

Back Back to CVE browser

HIGH

lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process

Published Jan 10, 2018

7.8

HIGH

CVSS 3.0

EPSS 0.55%

Description

lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (7)

http://www.openwall.com/lists/oss-security/2014/07/07/16
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/17/5
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/68735
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.vapid.dhs.org/advisories/point-cli-0.0.1.html
x_refsource_MISCExploitThird Party Advisory
https://github.com/advisories/GHSA-mc8m-x6hf-cw2g
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-4997
https://web.archive.org/web/20200229054941/http://www.securityfocus.com/bid/68735

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2014/07/07/16		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/17/5		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/68735		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.vapid.dhs.org/advisories/point-cli-0.0.1.html		x_refsource_MISCExploitThird Party Advisory
https://github.com/advisories/GHSA-mc8m-x6hf-cw2g		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-4997
https://web.archive.org/web/20200229054941/http://www.securityfocus.com/bid/68735