Information disclosure in Tobias Maier Paratrooper-Pingdom

CVE-2014-1233

The paratrooper-pingdom gem 1.0.0 for Ruby allows local users to obtain the App-Key, username, and password values by listing the curl process.

Vulnerability class: Information Disclosure

EPSS: 0.004 (33.6th percentile) — read the EPSS interpretation.

Affected products

Tobias_maier Paratrooper-pingdom — versions 1.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_MLIST, Exploit)