Skip to content
OpenAdvisories
High · 7.8 CVE-2014-4992 EUVD-2018-0182GHSA-pcm6-g2qp-9gw8

Cap-Strap gem for Ruby places credentials on the useradd command line

Published Jan 10, 2018 · Updated Aug 6, 2024 · Assigned by mitre

Description

lib/cap-strap/helpers.rb in the cap-strap gem 0.1.5 for Ruby places credentials on the useradd command line, which allows local users to obtain sensitive information by listing the process.

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems cap-strap 0.1.5 — GHSA-pcm6-g2qp-9gw8

References