7 matches found
GHSA-WR5J-Q359-6VR2 backup-agoddard and backup_checksum have Information Exposure vulnerability
1 lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and 2 lib/backup/cli/utility.rb in the backupchecksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process...
Design/Logic Flaw
1 lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and 2 lib/backup/cli/utility.rb in the backupchecksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process...
CVE-2014-4993
1 lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and 2 lib/backup/cli/utility.rb in the backupchecksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process...
CVE-2014-4993
1 lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and 2 lib/backup/cli/utility.rb in the backupchecksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process...
CVE-2014-4993
CVE-2014-4993 affects the Ruby backups gems backup-agoddard (version 3.0.28) and backup_checksum (version 3.0.23). The vulnerability lies in lib/backup/cli/utility.rb, which places credentials on the openssl command line, allowing local users to obtain sensitive information by listing the process...
CVE-2014-4993: Exposure of Sensitive Information to an Unauthorized Actor
1 lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and 2 lib/backup/cli/utility.rb in the backupchecksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process...
PT-2018-4235
Name of the Vulnerable Software and Affected Versions backup-agoddard gem version 3.0.28 backup checksum gem version 3.0.23 Description The issue allows local users to obtain sensitive information by listing the process, as credentials are placed on the openssl command line in the...