Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2017-16355

🗓️ 14 Dec 2017 22:00:00Reported by Debian Security Bug TrackerType 
debiancve
 debiancve🔗 security-tracker.debian.org👁 22 Views

Phusion Passenger 5.1.10 allows arbitrary file content listing by symlink file

Related
Packages
ReporterTitlePublishedViews
Family
FreeBSD		rubygem-passenger -- arbitrary file read vulnerability
13 Oct 201700:00
–freebsd
BDU FSTEC		The vulnerability in the Phusion Passenger web server relates to the possibility of creating a symbolic link between a REVISION file and an arbitrary file in the system. This allows a malicious actor to gain access to confidential data.
25 Apr 201900:00
–bdu_fstec
CNVD		Phusion Passenger Arbitrary File Read Vulnerability
18 Dec 201700:00
–cnvd
CVE		CVE-2017-16355
14 Dec 201722:00
–cve
Cvelist		CVE-2017-16355
14 Dec 201722:00
–cvelist
Debian		[SECURITY] [DSA 4415-1] passenger security update
24 Mar 201911:02
–debian
Debian		[SECURITY] [DSA 4415-1] passenger security update
24 Mar 201911:02
–debian
Tenable Nessus		Debian DSA-4415-1 : passenger - security update
25 Mar 201900:00
–nessus
Tenable Nessus		FreeBSD : rubygem-passenger -- arbitrary file read vulnerability (8cf25a29-e063-11e7-9b2c-001e672571bc)
19 Dec 201700:00
–nessus
Tenable Nessus		Ubuntu 16.04 ESM : Phusion Passenger vulnerabilities (USN-5261-1)
20 Oct 202300:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian11anypassenger5.0.30-1.1passenger_5.0.30-1.1_any.deb
Debian12anypassenger5.0.30-1.1passenger_5.0.30-1.1_any.deb
Debian13anypassenger5.0.30-1.1passenger_5.0.30-1.1_any.deb
Debian14anypassenger5.0.30-1.1passenger_5.0.30-1.1_any.deb
Debian999anypassenger5.0.30-1.1passenger_5.0.30-1.1_any.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
14 Dec 2017 22:00Current
5Medium risk
Vulners AI Score5
CVSS 21.2
CVSS 3.14.7
EPSS0.00358
phusion passengerfile listingsymlinksecurity vulnerability
22