Information Disclosure

2020-10-1605:48:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.8%

JSON

cloudforms is vulnerable to information disclosure. The user passwords are stored in a recoverable format, allowing an attacker to obtain the passwords in cleartext.

CPENameOperatorVersion
ruby193-rubygem-i18neq0.6.0__8.el6_4
ruby193-rubygem-i18neq0.6.0__3.el6
ruby193-rubygem-maileq2.4.4__3.el6
ruby193-rubygem-maileq2.4.4__4.el6
ruby193-rubygem-maileq2.4.4__8.el6_4
ruby193-rubygem-activeresourceeq3.2.8__5.el6_4
ruby193-rubygem-activeresourceeq3.2.8__1.el6
ruby193-rubygem-activeresourceeq3.2.8__2.el6
ruby193-rubygem-open4eq1.3.0__3.el6op
ruby193-rubygem-fogeq1.10.1__10.el6ost

Name	Operator	Version
ruby193-rubygem-i18n	eq	0.6.0__8.el6_4
ruby193-rubygem-i18n	eq	0.6.0__3.el6
ruby193-rubygem-mail	eq	2.4.4__3.el6
ruby193-rubygem-mail	eq	2.4.4__4.el6
ruby193-rubygem-mail	eq	2.4.4__8.el6_4
ruby193-rubygem-activeresource	eq	3.2.8__5.el6_4
ruby193-rubygem-activeresource	eq	3.2.8__1.el6
ruby193-rubygem-activeresource	eq	3.2.8__2.el6
ruby193-rubygem-open4	eq	1.3.0__3.el6op
ruby193-rubygem-fog	eq	1.10.1__10.el6ost