Lucene search
Veracode Vulnerability DatabaseVERACODE:21437HistorySep 06, 2019 - 3:22 a.m.
Information Disclosure
2019-09-0603:22:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.002
Percentile
55.9%
airbrake-ruby is vulnerable to information disclosure. A misconfiguration where the NoticeNotifier is initialized without blacklist/whitelist keys being specified in Config, causes a filter on the password to stop taking effect and exposing the password in plaintext.
Related
cve
cve
CVE-2019-16060
2019-09-06 19:15:11
rubygems
rubygems
Blacklist keys are no longer being filtered in airbrake-ruby
2019-04-09 21:00:00
osv
osv
Airbrake keys not being filtered
2019-09-11 23:05:57
CVE-2019-16060
2019-09-06 19:15:11
prion
prion
Default configuration
2019-09-06 19:15:00
github
github
Airbrake keys not being filtered
2019-09-11 23:05:57
cvelist
cvelist
CVE-2019-16060
2019-09-06 18:15:15
nvd
nvd
CVE-2019-16060
2019-09-06 19:15:11