CVE-2014-4995

Опубликовано: 10 янв. 2018

Источник: nvd

CVSS3: 7

CVSS2: 1.9

EPSS Низкий

Описание

Race condition in lib/vlad/dba/mysql.rb in the VladTheEnterprising gem 0.2 for Ruby allows local users to obtain sensitive information by reading the MySQL root password from a temporary file before it is removed.

Ссылки

http://www.openwall.com/lists/oss-security/2014/07/07/14
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/17/5
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/68729
Third Party Advisory
VDB Entry
http://www.vapid.dhs.org/advisories/VladTheEnterprising-0.2.html
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94745
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2014/07/07/14
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/17/5
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/68729
Third Party Advisory
VDB Entry
http://www.vapid.dhs.org/advisories/VladTheEnterprising-0.2.html
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94745
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vladtheenterprising_project:vladtheenterprising:0.2.0:*:*:*:*:ruby:*:*

EPSS

Процентиль: 17%

0.00054

Низкий

7 High

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-86cf-g34f-7462