Loading vulnerability details…
CVSS v3.1
N/A
EPSS
0.52%
Published
Jan 10, 2018
Modified
Nov 20, 2024
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process.
Weaknesses (CWE)
Affected Products (1)
References (6)