Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[rest-client] Gemnasium security alert #403

Closed
ghost opened this issue Feb 25, 2015 · 0 comments
Closed

[rest-client] Gemnasium security alert #403

ghost opened this issue Feb 25, 2015 · 0 comments

Comments

@ghost
Copy link

ghost commented Feb 25, 2015

https://gemnasium.com/korobkov/active_scaffold/alerts#alert-711094

ALERTS FOR REST-CLIENT (REQUIRED BY LOCALEAPP)
Security alert open on February 25, 2015 11:43
OSVDB-117461 - LOG PLAINTEXT PASSWORD LOCAL DISCLOSURE
REST Client for Ruby contains a flaw that is due to the application logging password information in plaintext. This may allow a local attacker to gain access to password information.

Affected versions: <1.7.3
Not affected: 1.7.3
Fixed versions: 1.7.3
Identifier: OSVDB-117461
Solution: Upgrade to 1.7.3
Credit: Sterling Paramore (https://github.com/gnilrets)
Sources: rest-client/rest-client#349
http://www.osvdb.org/show/osvdb/117461

scambra added a commit that referenced this issue Feb 25, 2015
@scambra scambra closed this as completed Feb 25, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant