CVE-2014-1234.yml

---
gem: paratrooper-newrelic
cve: 2014-1234
osvdb: 101839
ghsa: 959j-5g9v-3fpq
url: https://nvd.nist.gov/vuln/detail/CVE-2014-1234
title: Paratrooper-newrelic Gem for Ruby Process Listing API Key Local Disclosure
date: 2014-01-08
description: |
  Paratrooper-newrelic Gem for Ruby contains a flaw in
  /lib/paratrooper-newrelic.rb. The issue is triggered when the script exposes
  the API key, allowing a local attacker to gain access to it by monitoring the
  process tree.
cvss_v2: 2.1