GHSA-pcm6-g2qp-9gw8

Suggest an improvement
Source
https://github.com/advisories/GHSA-pcm6-g2qp-9gw8
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/03/GHSA-pcm6-g2qp-9gw8/GHSA-pcm6-g2qp-9gw8.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-pcm6-g2qp-9gw8
Aliases
  • CVE-2014-4992
Published
2018-03-16T01:13:46Z
Modified
2023-11-08T03:57:42Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Cap-Strap gem for Ruby places credentials on the useradd command line
Details

lib/cap-strap/helpers.rb in the cap-strap gem 0.1.5 for Ruby places credentials on the useradd command line, which allows local users to obtain sensitive information by listing the process.

Database specific 
{
    "cwe_ids":  [
        "CWE-200"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2020-06-16T21:48:53Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}
References

Affected packages

RubyGems / cap-strap

Package

Name
cap-strap
Purl
pkg:gem/cap-strap

Affected ranges

Affected versions

0.*
0.1.5

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/03/GHSA-pcm6-g2qp-9gw8/GHSA-pcm6-g2qp-9gw8.json"