CVE-2014-1835: Echor Project Echor

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table.

Affected products

• Echor Project Echor: version 0.1.6 only

Published 2018-02-02. Last modified 2026-06-17.