CVE-2014-5000
1 advisory.
RubyGems/lawn-login CVE-2014-5000: high 7.8
lawn-login exposes database password to unauthorized users
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rhgq-vv9x-j4p5
- https://nvd.nist.gov/vuln/detail/CVE-2014-5000
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lawn-login/CVE-2014-5000.yml
- https://github.com/skalnik/lawn-login
- https://web.archive.org/web/20200229060607/http://www.vapid.dhs.org/advisories/lawn-login-0.0.7.html
CVE-2014-5000 · published · modified · JSON