PT-2014-4025

Name of the Vulnerable Software and Affected Versions paratrooper-pingdom gem version 1.0.0 Description The issue allows local users to obtain sensitive information, including the App-Key, username, and password values, by listing the curl process. This is possible due to the way the...

paratrooper-pingdom Gem for Ruby /lib/paratrooper-pingdom.rb API Login Credentials Local Disclosure

paratrooper-pingdom Gem for Ruby contains a flaw in /lib/paratrooper-pingdom.rb. The issue is triggered when the script exposes API login credentials, allowing a local attacker to gain access to the API key, username, and password for the API login by monitoring the process tree...