CVE-2014-4997

Name of the Vulnerable Software and Affected Versions point-cli gem version 0.0.1

Description The issue allows local users to obtain sensitive information by listing the process, as credentials are placed on the curl command line in the lib/commands/setup.rb file of the point-cli gem for Ruby.

Recommendations For point-cli gem version 0.0.1, consider restricting access to sensitive information and avoid using the lib/commands/setup.rb file until a fix is available. As a temporary workaround, consider modifying the lib/commands/setup.rb file to handle credentials securely, such as using environment variables or a secure storage mechanism for sensitive information.