CVE-2014-4992

Name of the Vulnerable Software and Affected Versions cap-strap gem version 0.1.5

Description The issue allows local users to obtain sensitive information by listing the process, as credentials are placed on the useradd command line in the lib/cap-strap/helpers.rb file of the cap-strap gem for Ruby.

Recommendations For cap-strap gem version 0.1.5, consider updating to a newer version that does not place credentials on the command line, or as a temporary workaround, restrict access to sensitive information that could be exposed through process listing.