Skip to content

Low severity vulnerability that affects sensu

Low severity GitHub Reviewed Published Jul 23, 2018 to the GitHub Advisory Database • Updated Jan 9, 2023
Withdrawn This advisory was withdrawn on Jun 16, 2020

Package

bundler sensu (RubyGems)

Affected versions

< 1.2.1

Patched versions

1.2.1

Description

The sensu rubygem prior to version 1.2.0 contains a CWE-522 (Insufficiently Protected Credentials) flaw that can result in sensitive configuration data (e.g. passwords) being logged in clear-text.

Users are advised to upgrade to rubygem version 1.2.1 or later.

References

Published to the GitHub Advisory Database Jul 23, 2018
Reviewed Jun 16, 2020
Withdrawn Jun 16, 2020
Last updated Jan 9, 2023

Severity

Low

EPSS score

0.562%
(78th percentile)

Weaknesses

No CWEs

CVE ID

CVE-2018-1000060

GHSA ID

GHSA-69mv-3642-wj3w

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.