VulnerableCode Advisory Details - gem/xaviershay-dm-rails/CVE-2015-2179

Staging Environment: Content and features may be unstable or change without notice.

Advisory details: gitlab / gem/xaviershay-dm-rails/CVE-2015-2179

Essentials
Severities (0)
References (2)
Exploits (0)
EPSS
Severity details (0)
Patches: (0)

Advisory ID	gitlab/gem/xaviershay-dm-rails/CVE-2015-2179
Aliases	CVE-2015-2179
Summary	MySQL credential exposure The `execute` function in the xaviershay-dm-rail package exposes user credentials to the process table in `/datamapper/dm-rails/blob/master/lib/dm-rails/storage.rb`
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details

Weaknesses (2)

CWE-1035	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

System	Score	Found at
There are no known severity scores.

Reference id	Reference type	URL
		http://osvdb.org/show/osvdb/118579
		http://seclists.org/fulldisclosure/2015/Feb/86

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.