Lucene search

K
osvGoogleOSV:GHSA-MC8M-X6HF-CW2G
HistoryMay 14, 2022 - 3:47 a.m.

point-cli allows local users to obtain sensitive information by listing the process

2022-05-1403:47:44
Google
osv.dev
4
point-cli gem process sensitive-information software

EPSS

0

Percentile

5.1%

lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process.

EPSS

0

Percentile

5.1%

Related for OSV:GHSA-MC8M-X6HF-CW2G