ADVISORIES

• CVE-2014-4992 (NVD)
• GHSA-pcm6-g2qp-9gw8
• OSVDB-108574

GEM

cap-strap

SEVERITY

CVSS v3.x: 7.8 (High)

PATCHED VERSIONS

None.

DESCRIPTION

cap-strap Gem for Ruby contains a flaw that is due to the application exposing credential information in plaintext in the process table listing. This may allow a local attacker to gain access to credential information.