CVE-2014-4992

lib/cap-strap/helpers.rb in the cap-strap gem 0.1.5 for Ruby places credentials on the useradd command line, which allows local users to obtain sensitive information by listing the process.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-01-10

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Cap-strap (Cap-strap Project)

References

• http://www.openwall.com/lists/oss-security/2014/07/07/9
• http://www.openwall.com/lists/oss-security/2014/07/17/5
• http://www.vapid.dhs.org/advisories/cap-strap-0.1.5.html