RubyGems/lean-ruport CVE-2014-4998: high 7.8, EPSS 0.52%
lean-ruport allows local users to obtain sensitive information by listing the process
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.3.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-5g7f-p7jg-v6mv
- https://nvd.nist.gov/vuln/detail/CVE-2014-4998
- http://www.openwall.com/lists/oss-security/2014/07/07/18
- http://www.openwall.com/lists/oss-security/2014/07/17/5
- http://www.vapid.dhs.org/advisories/lean-ruport-0.3.8.html
CVE-2014-4998 · published · modified · JSON