GitHub Advisoryadvisory · RubyGems
GHSA-959j-5g9v-3fpq Paratrooper-newrelic Exposes of Sensitive Information to an Unauthorized Actor
LOW
Official page ↗
- Aliases
- CVE-2014-1234
- Ecosystem
- RubyGems
- Packages
- paratrooper-newrelic
- Severity
- Low
- Weaknesses
- CWE-200
- Reviewed
- 2020-06-16
Affected packages
• RubyGems paratrooper-newrelic: <= 1.0.1 (no fix yet)
Description
The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process.
Related
Alias · CVE (1)
- CVE-2014-1234 The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process. vulnerability
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness