Design/Logic Flaw

2018-01-1018:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

(1) lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and (2) lib/backup/cli/utility.rb in the backup_checksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process.

CPENameOperatorVersion
backup-agoddardeq3.0.28
backup_checksumeq3.0.23

CPE	Name	Operator	Version
	backup-agoddard	eq	3.0.28
	backup_checksum	eq	3.0.23

References

www.openwall.com/lists/oss-security/2014/07/07/11

www.openwall.com/lists/oss-security/2014/07/07/12

www.openwall.com/lists/oss-security/2014/07/17/5

www.vapid.dhs.org/advisories/backup-agoddard-3.0.28.html

www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html