Lawn-Login Project Lawn-Login

1 CVEs affecting Lawn-Login Project Lawn-Login. Latest disclosed: 2018-01-10. Critical: 0, High: 1.

Top CVEs affecting Lawn-Login Project Lawn-Login
CVESeverityScorePublishedSummary
CVE-2014-5000High7.82018-01-10The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitiv…