Local User Information Disclosure in Ruby's xaviershay-dm-rails Gem
CVE-2015-2179

Currently unrated

Key Information:

Vendor

Ruby

Status
xaviershay-dm-rails
Vendor
CVE Published:
12 December 2023

What is CVE-2015-2179?

The xaviershay-dm-rails gem version 0.10.3.8 for Ruby has a vulnerability that allows local users to access sensitive MySQL credentials by listing processes and their arguments. This exposure could lead to unauthorized data access, making it crucial for users to evaluate their system's security and apply necessary patches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.vapid.dhs.org/advisory.php?v=115

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.