CVE-2014-1234

paratrooper-newrelic 1.0.1 - Exposure of Sensitive Information via Process Listing

Title source: llm
STIX 2.1

Description

The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process.

References (2)

Core 2
Core References
Exploit mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/01/08/2

Scores

EPSS 0.0021
EPSS Percentile 42.6%

Details

CWE
CWE-200
Status published
Products (2)
paratrooper-newrelic_project/paratrooper-newrelic 1.0.1
rubygems/paratrooper-newrelic 0RubyGems
Published Jan 10, 2014
Tracked Since Feb 18, 2026