RubyGems/kcapifony CVE-2014-5001: high 7.8, EPSS 0.52%
Kcapifony gem for Ruby places database user passwords on the command line
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.1.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6fcq-3cm2-j3j5
- https://nvd.nist.gov/vuln/detail/CVE-2014-5001
- https://github.com/Kunstmaan/kCapifony
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kcapifony/CVE-2014-5001.yml
- http://www.openwall.com/lists/oss-security/2014/07/07/21
- http://www.openwall.com/lists/oss-security/2014/07/17/5
- http://www.vapid.dhs.org/advisories/kcapifony-2.1.6.html
CVE-2014-5001 · published · modified · JSON