Medium · 5.5 CVE-2015-2179 EUVD-2023-0400GHSA-88p8-4vv5-82j7

xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table

Published Dec 12, 2023 · Updated Aug 6, 2024 · Assigned by mitre

Description

The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and its arguments.

Ecosystem	Package	Affected	Fixed	Record
RubyGems	xaviershay-dm-rails	<= 1.2.0	—	GHSA-88p8-4vv5-82j7