Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Tetravista

#32495de 53,635
7.8CVSS total
Vulnerabilidades · 1
PT-2018-4244
7.8
2018-01-10
Ruby · Lynx · CVE-2014-5002
**Name of the Vulnerable Software and Affected Versions** lynx gem versions prior to 1.0.0 **Description** The issue allows local users to obtain sensitive information by listing processes because the configured password is placed on command lines. As of version 1.0.0, the `--password` option is no longer supported, and passwords are only configured in a configuration file, preventing command line exposure. **Recommendations** For versions prior to 1.0.0, update to version 1.0.0 or later, as it removes the `--password` option and configures passwords solely through a configuration file, thus mitigating the risk of password exposure on the command line.