Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-3448
HistoryApr 29, 2015 - 12:00 a.m.

CVE-2015-3448

2015-04-2900:00:00
ubuntu.com
ubuntu.com
11

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%

REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and
passwords, which allows local users to obtain sensitive information by
reading the log.

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%