CVE-2014-1234

low
Published 2014-01-08 · Modified 2024-11-29
CVSS v3
CVSS v2
2.1
VIR risk
2.1

Description

Paratrooper-newrelic Exposes of Sensitive Information to an Unauthorized Actor

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact

EcosystemPackageVulnerableFixed
ruby RubyGemsparatrooper-newrelic
ruby RubyGemsparatrooper-newrelic<=1.0.1

Application impact

VendorProductVersionsFixed
paratrooper-newrelic_projectparatrooper-newrelic1.0.1

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.