EUVD-2018-0164

Malware in sbrugna...

GHSA-RHGQ-VV9X-J4P5 lawn-login exposes database password to unauthorized users

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

Command injection

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

CVE-2014-5000

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

CVE-2014-5000

The CVE-2014-5000 issue affects the lawn-login Ruby gem (version 0.0.7), where the login function in lib/lawn.rb places credentials on the curl command line. This exposes sensitive information to local users who can enumerate the process list, enabling local plaintext password disclosure. The roo...

PT-2018-4242

Name of the Vulnerable Software and Affected Versions lawn-login gem version 0.0.7 Description The issue concerns the login function in the lawn-login gem for Ruby, which places credentials on the curl command line. This allows local users to obtain sensitive information by listing the process. T...

CVE-2014-5000: Exposure of Sensitive Information to an Unauthorized Actor

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...