CVE-2014-4998

CVE-2014-4998 is a local information disclosure vulnerability affecting the lean-ruport gem 0.3.8 for Ruby. The vulnerability exposes the MySQL user password on the mysqldump command line, allowing local users to retrieve sensitive information by listing system processes. With a CVSS score of 7.8 (High), it has low attack complexity and requires local user privileges, but can lead to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.