Sha256: 67401b4b6978447ca10c387b02f29785ffa8bb38a38d27719e0b32170955953d

Contents?: true

Size: 374 Bytes

Versions: 6

Compression:

Stored size: 374 Bytes

Contents

---
gem: cap-strap
osvdb: 108575
url: http://osvdb.org/show/osvdb/108575
title: cap-strap Gem for Ruby Hardcoded Password Crypt Hash Salt Weakness
date: 2014-06-30
description: cap-strap Gem for Ruby contains a flaw that is due to the application using a hardcoded default 'sa' salt for password encryption. This may allow a local attacker to more easily decrypt passwords.

Version data entries

6 entries across 6 versions & 2 rubygems

Version Path
bundler-audit-0.7.0.1 data/ruby-advisory-db/gems/cap-strap/OSVDB-108575.yml
bundler-budit-0.6.2 data/ruby-advisory-db/gems/cap-strap/OSVDB-108575.yml
bundler-budit-0.6.1 data/ruby-advisory-db/gems/cap-strap/OSVDB-108575.yml
bundler-audit-0.6.1 data/ruby-advisory-db/gems/cap-strap/OSVDB-108575.yml
bundler-audit-0.6.0 data/ruby-advisory-db/gems/cap-strap/OSVDB-108575.yml
bundler-audit-0.5.0 data/ruby-advisory-db/gems/cap-strap/OSVDB-108575.yml