CVE-2013-7111
Exposure of Sensitive Information in bio-basespace-sdk
The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.
Exploit likelihood
What each source reports
NVD Score used
The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.
- Record
CVE-2013-7111- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.
- Record
CVE-2013-7111- Updated
- 2026-11-02
EUVDEUVD-2017-0336 No score
The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.
- Record
EUVD-2017-0336- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xwr3-fmgj-mmfr No score
Exposure of Sensitive Information in bio-basespace-sdk
The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.
- Record
GHSA-xwr3-fmgj-mmfr- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVGHSA-xwr3-fmgj-mmfr No score
Exposure of Sensitive Information in bio-basespace-sdk
The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.
- Record
GHSA-xwr3-fmgj-mmfr- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bio-basespace-sdkRubyGems |
through 0.1.7 | None known |
bio-basespace-sdkRubyGems |
through 0.1.7, plus listed versions 0.1.20.1.30.1.50.1.6 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7111 is a medium vulnerability (CVSS 5.0) in Basespace Ruby Sdk Project Ruby Sdk, published April 29, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.51%, the 74th percentile. No source names a fixed version.
References
vapid.dhs.org/advisories/bio-basespace-sdk.html
openwall.com/lists/oss-security/2013/12/14/2
nvd.nist.gov/vuln/detail/CVE-2013-7111
github.com/advisories/GHSA-xwr3-fmgj-mmfr