ADVISORIES

• CVE-2014-4997 (NVD)
• GHSA-mc8m-x6hf-cw2g
• OSVDB-108577

GEM

point-cli

SEVERITY

CVSS v3.x: 7.8 (High)

PATCHED VERSIONS

None.

DESCRIPTION

point-cli Gem for Ruby contains a flaw in /lib/commands/setup.rb that is due to the application exposing credential information in plaintext in the process table. This may allow a local attacker to gain access to credential information.