Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Race condition in lib/vlad/dba/mysql.rb in the VladTheEnterprising gem 0.2 for Ruby allows local users to obtain sensitive information by reading the MySQL root password from a temporary file before it is removed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby VladTheEnterprising gem 信息泄露漏洞
Vulnerability Description
Ruby VladTheEnterprising gem是软件开发者Michael L. Welles所研发的一个用于帮助用户使用Vlad（Ruby应用部署工具）管理企业环境的系列软件包。 Ruby VladTheEnterprising gem 0.2版本中的lib/vlad/dba/mysql.rb文件存在信息泄露漏洞。本地攻击者可通过在临时文件被移除之前读取文件中的SQL root密码利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A