Loading vulnerability details…
CVSS v3.1
N/A
EPSS
0.52%
Published
Jan 10, 2018
Modified
Nov 20, 2024
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes.
Weaknesses (CWE)
Affected Products (1)
References (8)