CVE-2015-2179

Published Dec 12, 2023 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and its arguments.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-88p8-4vv5-82j7 xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 5:10 AM
Reserved
Mar 2, 2015, 12:00 AM
Status
Modified
Published
Dec 12, 2023, 5:15 PM
Modified
Jun 17, 2026, 12:23 AM