RubySec

Providing security resources for the Ruby community

CVE-2014-4997 (point-cli): point-cli Gem for Ruby /lib/commands/setup.rb Process Table Local Plaintext Credential Disclosure

ADVISORIES

GEM

point-cli

PATCHED VERSIONS

None.

DESCRIPTION

point-cli Gem for Ruby contains a flaw in /lib/commands/setup.rb that is due to the application exposing credential information in plaintext in the process table. This may allow a local attacker to gain access to credential information.