Lucene search
+L

3 matches found

Mend
Mend
•added 2018/01/10 6:00 p.m.•1 views

CVE-2014-5000

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

8.5CVSS0.00522EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2018/01/10 12:00 a.m.•1 views

PT-2018-4242

Name of the Vulnerable Software and Affected Versions lawn-login gem version 0.0.7 Description The issue concerns the login function in the lawn-login gem for Ruby, which places credentials on the curl command line. This allows local users to obtain sensitive information by listing the process. T...

7.8CVSS0.00522EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/10 12:00 a.m.•3 views

CVE-2014-5000: Exposure of Sensitive Information to an Unauthorized Actor

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

7.8CVSS7.3AI score0.00522EPSS
SaveExploits1References2
Rows per page
Query Builder