GitHub Advisoryadvisory · RubyGems

GHSA-mx9f-w8qq-q5jf rest-client allows local users to obtain sensitive information by reading the log

LOW Published 2017-10-24 Modified 2023-01-23 Official page ↗
Aliases
CVE-2015-3448
Ecosystem
RubyGems
Packages
rest-client
Severity
Low
Weaknesses
CWE-200
Reviewed
2020-06-16

Affected packages

• RubyGems rest-client: < 1.7.3 → fixed in 1.7.3

Description

REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

Related

Alias · CVE (1)

  • CVE-2015-3448 REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References