CVE-2014-1835
1 advisory.
RubyGems/echor CVE-2014-1835: high 7.8
Echor Ruby Gem credentials can be stolen via process table monitoring
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-j4gx-p3x5-m987
- https://nvd.nist.gov/vuln/detail/CVE-2014-1835
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/echor/CVE-2014-1835.yml
- http://www.openwall.com/lists/oss-security/2014/01/31/10
CVE-2014-1835 · published · modified · JSON