CVE-2015-3448

Description

REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

References

https://github.com/rest-client/rest-client/issues/349

http://www.securityfocus.com/bid/74415

http://www.osvdb.org/117461

http://lists.opensuse.org/opensuse-updates/2015-04/msg00026.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3