CVE-2014-1835 — HIGH (7.8) — White Hats Nepal

Vulnerability Description

The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Echor Project	Echor	0.1.6

Related Weaknesses (CWE)

CWE-255

References

http://www.openwall.com/lists/oss-security/2014/01/31/10Mailing ListThird Party Advisory
http://xforce.iss.net/xforce/xfdb/90858Broken Link
http://www.openwall.com/lists/oss-security/2014/01/31/10Mailing ListThird Party Advisory
http://xforce.iss.net/xforce/xfdb/90858Broken Link

FAQ

What is CVE-2014-1835?

CVE-2014-1835 is a vulnerability with a CVSS score of 7.8 (HIGH). The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table.

How severe is CVE-2014-1835?

CVE-2014-1835 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-1835?

Check the references section above for vendor advisories and patch information. Affected products include: Echor Project Echor.