Lucene search

rest-client allows local users to obtain sensitive information by reading the log

🗓️ 24 Oct 2017 18:36:33Reported by GitHub Advisory DatabaseType

rest-client logs sensitive informatio

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 26
CVE	CVE-2015-3448	29 Apr 201520:59	–	cve
NVD	CVE-2015-3448	29 Apr 201520:59	–	nvd
UbuntuCve	CVE-2015-3448	29 Apr 201500:00	–	ubuntucve
OSV	GHSA-MX9F-W8QQ-Q5JF rest-client allows local users to obtain sensitive information by reading the log	24 Oct 201718:33	–	osv
OSV	CVE-2015-3448	29 Apr 201520:59	–	osv
OSV	UBUNTU-CVE-2015-3448	29 Apr 201520:59	–	osv
OSV	MGASA-2015-0227 Updated ruby-rest-client packages fix security vulnerabilities	15 May 201518:23	–	osv
OSV	SUSE-SU-2019:2219-1 Security update for ardana-ansible, ardana-db, ardana-freezer, ardana-glance, ardana-input-model, ardana-nova, ardana-osconfig, ardana-tempest, caasp-openstack-heat-templates, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, documentation-suse-openstack-cloud, galera-python-clustercheck, openstack-cinder, openstack-glance, openstack-heat, openstack-horizon-plugin-monasca-ui, openstack-horizon-plugin-neutron-fwaas-ui, openstack-ironic, openstack-keystone, openstack-manila, openstack-monasca-agent, openstack-monasca-api, openstack-monasca-persister, openstack-monasca-persister-java, openstack-murano, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstack-nova, openstack-octavia, python-Beaver, python-oslo.db, python-osprofiler, python-swiftlm, venv-openstack-magnum, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-neutron	26 Aug 201912:35	–	osv
OSV	SUSE-SU-2020:0081-1 Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client	13 Jan 202009:38	–	osv
OSV	SUSE-SU-2017:0475-1 Security update for susestudio	16 Feb 201700:19	–	osv

Vulners

Node

rest-client_project rest-clientRange<1.7.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-3448
github	www.github.com/rest-client/rest-client/issues/349
lists	www.lists.opensuse.org/opensuse-updates/2015-04/msg00026.html
web	www.web.archive.org/web/20200228154247/http://www.securityfocus.com/bid/74415
github	www.github.com/advisories/GHSA-mx9f-w8qq-q5jf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2017 18:33Current

8.3High risk

Vulners AI Score8.3

CVSS22.1

EPSS0.00065

CWE-200