Lucene search
GoogleOSV:GHSA-RHGQ-VV9X-J4P5HistoryJan 22, 2018 - 11:45 p.m.
lawn-login exposes database password to unauthorized users
2018-01-2223:45:33
Google
osv.dev
12
0.0004 Low
EPSS
Percentile
5.1%
The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lawn-login | eq | 0.0.7 |
Related
cve
cve
CVE-2014-5000
2018-01-10 18:29:00
prion
prion
Command injection
2018-01-10 18:29:00
cvelist
cvelist
CVE-2014-5000
2018-01-10 18:00:00
github
github
lawn-login exposes database password to unauthorized users
2018-01-22 23:45:33
nvd
nvd
CVE-2014-5000
2018-01-10 18:29:00