CVE-2014-4997: Point-CLI Project Point-CLI

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process.

Affected products

• Point-CLI Project Point-CLI: version 0.0.1 only

Published 2018-01-10. Last modified 2026-06-17.