CVE-2014-4993

Name of the Vulnerable Software and Affected Versions backup-agoddard gem version 3.0.28 backup checksum gem version 3.0.23

Description The issue allows local users to obtain sensitive information by listing the process, as credentials are placed on the openssl command line in the lib/backup/cli/utility.rb file of the affected gems.

Recommendations For backup-agoddard gem version 3.0.28, consider updating to a version where the credentials are not placed on the openssl command line. For backup checksum gem version 3.0.23, consider updating to a version where the credentials are not placed on the openssl command line. As a temporary workaround, consider restricting access to the lib/backup/cli/utility.rb file to minimize the risk of exploitation.