ADVISORIES
- CVE-2013-7111 (NVD)
- GHSA-xwr3-fmgj-mmfr
- OSVDB-101031
GEM
PATCHED VERSIONS
None.
DESCRIPTION
Bio Basespace SDK Gem for Ruby contains a flaw that is due to the API client code passing the API_KEY to a curl command. This may allow a local attacker to gain access to API key information by monitoring the process table.