CVE-2019-16060

The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklistkeys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 also, 4.2.2 and earlier are unaffected...

EUVD-2019-0647

Malware in sbrugna...

Airbrake Ruby for Airbrake Information Disclosure Vulnerability

Airbrake is a suite of application exception monitoring software.Airbrake Ruby is a library that sends Ruby application exceptions to the Airbrake dashboard. An information disclosure vulnerability exists in Airbrake Ruby for Airbrake version 4.2.3, which can be exploited by an unauthorized...

Default configuration

The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklistkeys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 also, 4.2.2 and earlier are unaffected...

CVE-2019-16060

The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklistkeys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 also, 4.2.2 and earlier are unaffected...

Information Disclosure

airbrake-ruby is vulnerable to information disclosure. A misconfiguration where the NoticeNotifier is initialized without blacklist/whitelist keys being specified in Config, causes a filter on the password to stop taking effect and exposing the password in plaintext...

PT-2019-14498

Name of the Vulnerable Software and Affected Versions Airbrake Ruby notifier version 4.2.3 Description The Airbrake Ruby notifier mishandles the blacklist keys configuration option, which may lead to the disclosure of passwords to unauthorized actors. Recommendations For Airbrake Ruby notifier...

CVE-2019-16060: Undefined Security Weakness

The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklistkeys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 also, 4.2.2 and earlier are unaffected...