{"action":"Upgrade kafo to 0.3.17 or later.","affected":[{"fixed":"0.3.17","introduced":"0"},{"fixed":"0.5.2","introduced":"0.4.0"}],"component":"kafo","cve_ids":["CVE-2014-0135"],"ecosystem":"RubyGems","epss":0.00331,"exploited":false,"fixed_versions":["0.3.17","0.5.2"],"ghsa_id":"GHSA-hxvp-655x-xxqv","id":"tcs_01M5KEKQYYXSN483NN4WFZ57BT","modified_at":"2024-12-06T05:38:12.351755Z","published_at":"2022-05-17T04:44:31Z","references":["https://osv.dev/vulnerability/GHSA-hxvp-655x-xxqv","https://nvd.nist.gov/vuln/detail/CVE-2014-0135","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kafo/CVE-2014-0135.yml","https://github.com/theforeman/kafo","http://theforeman.org/security.html"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-hxvp-655x-xxqv","url":"https://osv.dev/vulnerability/GHSA-hxvp-655x-xxqv"}],"summary":"Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml"}