CVE-2014-5002

Exploit

EPSS 0.08%
Published 10.01.2018 18:29:00
Last modified 21.11.2024 02:11:15
Source cve@mitre.org
CVE-Watchlists
Login
Open
Login

The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes.

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Lynx Project ≫ Lynx SwPlatformruby Version < 1.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.204

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

http://www.openwall.com/lists/oss-security/2014/07/17/5

Third Party Advisory

Exploit

Mailing List

http://www.openwall.com/lists/oss-security/2014/07/07/23

Third Party Advisory

Exploit

Mailing List

http://www.vapid.dhs.org/advisories/lynx-0.2.0.html

Third Party Advisory

Exploit

https://github.com/panthomakos/lynx/issues/3

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-5002

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-5002

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-5002

EUVD