Contents

---
gem: kafo
cve: 2014-0135
osvdb: 106826
url: https://nvd.nist.gov/vuln/detail/CVE-2014-0135
title: Kafo default_values.yaml Insecure Permissions Local Information Disclosure
date: 2014-03-13
description: Kafo contains a flaw that is due to the program using insecure
  world-readable permissions for the default_values.yaml file. This may allow a
  local attacker to gain access to password and other unspecified sensitive
  information located within the file.
cvss_v2: 1.9
patched_versions:
  - "~> 0.3.17"
  - ">= 0.5.2"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/kafo/CVE-2014-0135.yml