CVE-2014-4993

7.8 highEPSS 0.5%

(1) lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and (2) lib/backup/cli/utility.rb in the backup_checksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2018-01-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

backup-agoddard_project:backup-agoddard
backup_checksum_project:backup_checksum

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-wr5j-q359-6vr2	RubyGems	backup-agoddard	<=3.0.28	no fix published
GHSA-wr5j-q359-6vr2	RubyGems	backup_checksum	<=3.0.23	no fix published

References

http://www.openwall.com/lists/oss-security/2014/07/07/11
http://www.openwall.com/lists/oss-security/2014/07/07/12
http://www.openwall.com/lists/oss-security/2014/07/17/5
http://www.vapid.dhs.org/advisories/backup-agoddard-3.0.28.html
http://www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html

Check your stack JSON