CVE-2014-5000

CVE-2014-5000 describes a vulnerability in the lawn-login gem (version 0.0.7) for Ruby, where the login function places user credentials directly on the curl command line. This allows local attackers to easily retrieve sensitive information by listing running processes. The vulnerability is rated as High severity (CVSS 7.8), indicating that an attacker with local access can achieve high confidentiality, integrity, and availability impact with low attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention.