GHSA-69mv-3642-wj3w

Suggest an improvement
Source
https://github.com/advisories/GHSA-69mv-3642-wj3w
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/07/GHSA-69mv-3642-wj3w/GHSA-69mv-3642-wj3w.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-69mv-3642-wj3w
Aliases
  • CVE-2018-1000060
Withdrawn
2020-06-16T21:18:47Z
Published
2018-07-23T19:50:22Z
Modified
2026-09-10T03:46:36Z
Summary
Low severity vulnerability that affects sensu
Details

The sensu rubygem prior to version 1.2.0 contains a CWE-522 (Insufficiently Protected Credentials) flaw that can result in sensitive configuration data (e.g. passwords) being logged in clear-text.

Users are advised to upgrade to rubygem version 1.2.1 or later.

Database specific 
{
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2020-06-16T21:18:47Z",
    "nvd_published_at": null,
    "severity": "LOW"
}
References

Affected packages

RubyGems / sensu

Package

Name
sensu
Purl
pkg:gem/sensu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.1

Affected versions

0.*
0.5.1
0.5.2
0.5.3
0.5.4
0.5.5
0.5.6
0.5.7
0.5.8
0.5.9
0.5.10
0.5.11
0.5.12
0.5.13
0.5.14
0.5.15
0.5.17
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.6.7
0.6.8
0.6.9
0.7.0
0.7.1
0.7.2
0.8.0
0.8.4
0.8.5
0.8.6
0.8.7
0.8.9
0.8.10
0.8.11
0.8.12
0.8.13
0.8.16
0.8.18
0.8.19
0.9.0.beta
0.9.0.beta.1
0.9.0.beta.2
0.9.0.beta.3
0.9.0.beta.4
0.9.0
0.9.1
0.9.2.beta
0.9.2
0.9.3.beta
0.9.3.beta.1
0.9.3.beta.2
0.9.3.beta.3
0.9.3.beta.4
0.9.3
0.9.4.beta
0.9.4.beta.1
0.9.4.beta.2
0.9.4
0.9.5.beta
0.9.5.beta.1
0.9.5.beta.2
0.9.5.beta.3
0.9.5.beta.4
0.9.5.beta.5
0.9.5
0.9.6.beta
0.9.6.beta.1
0.9.6.beta.2
0.9.6.beta.3
0.9.6.beta.4
0.9.6.beta.5
0.9.6.beta.6
0.9.6.beta.7
0.9.6
0.9.7.beta
0.9.7.beta.1
0.9.7.beta.2
0.9.7.beta.3
0.9.7.beta.4
0.9.7
0.9.8.beta
0.9.8.beta.1
0.9.8.beta.2
0.9.8.beta.3
0.9.8.beta.4
0.9.8
0.9.9.beta
0.9.9.beta.1
0.9.9.beta.2
0.9.9.beta.3
0.9.9.beta.4
0.9.9
0.9.10
0.9.11
0.9.12.beta
0.9.12.beta.1
0.9.12.beta.2
0.9.12.beta.3
0.9.12.beta.4
0.9.12.beta.5
0.9.12.beta.6
0.9.12
0.9.13.beta
0.9.13.beta.1
0.9.13
0.10.0
0.10.1
0.10.2
0.11.0.beta
0.11.0.beta.1
0.11.0.beta.2
0.11.0.beta.3
0.11.0.beta.4
0.11.0
0.11.1
0.11.3
0.12.0
0.12.1
0.12.2
0.12.3
0.12.4
0.12.5
0.12.6
0.13.0.alpha
0.13.0.alpha.1
0.13.0.alpha.2
0.13.0.beta
0.13.0.beta.1
0.13.0.beta.2
0.13.0
0.13.1
0.14.0.beta
0.14.0
0.15.0.beta
0.15.0.beta.1
0.15.0
0.16.0
0.17.0.beta
0.17.0.beta.1
0.17.0.beta.2
0.17.0.beta.3
0.17.0.beta.4
0.17.0
0.17.1
0.17.2
0.18.0.beta
0.18.0.beta.1
0.18.0
0.18.1
0.19.0.beta
0.19.0.beta.1
0.19.0.beta.2
0.19.0
0.19.1
0.19.2
0.20.0
0.20.1
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.21.0
0.22.0
0.22.1
0.22.2
0.23.0.beta
0.23.0
0.23.1
0.23.2
0.23.3
0.24.0.beta
0.24.0
0.24.1
0.25.0.beta
0.25.0.rc1
0.25.0
0.25.1
0.25.2
0.25.3
0.25.4
0.25.5
0.25.6
0.25.7
0.26.0.beta
0.26.0
0.26.1
0.26.2
0.26.3
0.26.4
0.26.5
0.27.0.alpha
0.27.0.alpha.2
0.27.0.beta.1
0.27.0.beta.2
0.27.0
0.27.1
0.28.0
0.28.1
0.28.2
0.28.3
0.28.4
0.28.5
0.28.6
0.29.0
1.*
1.0.0.alpha.1
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/07/GHSA-69mv-3642-wj3w/GHSA-69mv-3642-wj3w.json"