CVE-2015-3448 REJECTED

REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

EPSS 0.07% · 20.2th percentile

Risk Scores

EPSS Score
0.07%
20.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSruby-rest-client0, 1.6.7-6

Timeline

References

Open in Interactive Console →