6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.