← Back

Codders Dataset

codders-dataset

Vendor: Codders Dataset Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-4991
1Codders Dataset Project
1Codders Dataset
Nov 21, 2024
Jan 10, 2018
N/A· v4
7.8 HIGH· v3
2.1 LOW· v2
(1) lib/dataset/database/mysql.rb and (2) lib/dataset/database/postgresql.rb in the codders-dataset gem 1.3.2.1 for Ruby place credentials on the mysqldump command line, which allows local users to obtain sensitive infor...Show more
(1) lib/dataset/database/mysql.rb and (2) lib/dataset/database/postgresql.rb in the codders-dataset gem 1.3.2.1 for Ruby place credentials on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.Show less