Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-12028
HistoryJun 17, 2018 - 8:29 p.m.

Improper access control

2018-06-1720:29:00
PRIOn knowledge base
www.prio-n.com
5

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawning a child process, to report an arbitrary different PID back to Passenger’s process manager. If the malicious application then generates an error, it would cause Passenger’s process manager to kill said reported arbitrary PID.

CPENameOperatorVersion
passengerge5.3.0
passengerlt5.3.2

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%