Description
REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/74415
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-04/msg00026.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/117461
Issue Tracking x_refsource_confirm
https://github.com/rest-client/rest-client/issues/349
Scores
EPSS
0.0006
EPSS Percentile
20.2%
Details
CWE
CWE-200
Status
published
Products (2)
rest-client_project/rest-client
< 1.7.2
rubygems/rest-client
0 - 1.7.3RubyGems
Published
Apr 29, 2015
Tracked Since
Feb 18, 2026