Exposure of Sensitive Information in bio-basespace-sdk (GHSA-xwr3-fmgj-mmfr)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2013-7111
Severity: MODERATE · CWE: CWE-200

The put_call function in the API client (`api/api_client.rb`) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the `API_KEY` on the command line, which allows remote attackers to obtain sensitive information by listing the processes.

Affected packages:
package: ecosystem: RubyGems
name: bio-basespace-sdk
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 0.1.7