GHSA-mc8m-x6hf-cw2g
Suggest an improvement- Source
- https://github.com/advisories/GHSA-mc8m-x6hf-cw2g
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mc8m-x6hf-cw2g/GHSA-mc8m-x6hf-cw2g.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-mc8m-x6hf-cw2g
- Aliases
-
- CVE-2014-4997
- Published
- 2022-05-14T03:47:44Z
- Modified
- 2023-11-08T03:57:42.775618Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- point-cli allows local users to obtain sensitive information by listing the process
- Details
-
lib/commands/setup.rbin the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process. - References
Affected packages
RubyGems / point-cli
Package
- Name
- point-cli
- Purl
- pkg:gem/point-cli