lynx Gem for Ruby command/basic.rb Process Table Local Plaintext Password Disclosure
Published: June 30, 2014
SECURITY IDENTIFIERS
- CVE: CVE-2014-5002 (NVD)
- GHSA: GHSA-94cq-7ccq-cmcm
- OSVDB: OSVDB-108580
GEM
SEVERITY
CVSS v3.x: 7.8 (High)
PATCHED VERSIONS
>= 1.0.0
DESCRIPTION
lynx Gem for Ruby contains a flaw in command/basic.rb that is due to the application exposing password information in plaintext in the process table. This may allow a local attacker to gain access to password information.