gitlab/gem/paratrooper-pingdom/CVE-2014-1233
Pingdom API credentials exposure in process tree
The file lib/paratrooper-pingdom.rb executes curl requests with pingdom API credentials (app_key, username & password). If a malicious user manages to monitor the process tree that run on your server, he can then have access to these credentials.