CVE-2014-5000: Lawn-Login Project Lawn-Login

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process.

Affected products

• Lawn-Login Project Lawn-Login: version 0.0.7 only

Published 2018-01-10. Last modified 2026-06-17.