Skip to content
OpenAdvisories
High · 7.8 CVE-2014-5004 EUVD-2018-0184GHSA-vqcm-7f7f-r539

brbackup exposes database password to unauthorized users

Published Jan 10, 2018 · Updated Aug 6, 2024 · Assigned by mitre

Description

lib/brbackup.rb in the brbackup gem 0.1.1 for Ruby places the database password on the mysql command line, which allows local users to obtain sensitive information by listing the process.

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems brbackup 0.1.1 — GHSA-vqcm-7f7f-r539

References