Vulnerabilities > CVE-2015-2179 - Unspecified vulnerability in Xaviershay-Dm-Rails Porject Xaviershay-Dm-Rails 0.10.3.8

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
xaviershay-dm-rails-porject

Summary

The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and its arguments.

Vulnerable Configurations

Part Description Count
Application
Xaviershay-Dm-Rails_Porject
1