Lucene search
PRIOn knowledge basePRION:CVE-2018-12615HistoryJun 21, 2018 - 3:29 p.m.
Code injection
2018-06-2115:29:00
PRIOn knowledge base
www.prio-n.com
3
An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.
Related
cve
cve
CVE-2018-12615
2022-10-03 16:22:07
redhatcve
redhatcve
CVE-2018-12615
2018-06-22 17:48:44
veracode
veracode
Privilege Escalation
2018-06-22 02:35:11
nvd
nvd
CVE-2018-12615
2018-06-21 15:29:00
ubuntucve
ubuntucve
CVE-2018-12615
2018-06-21 00:00:00
osv
osv
Phusion Passenger incorrect permission assignment
2022-05-13 01:49:37
CVE-2018-12615
2018-06-21 15:29:00
debiancve
debiancve
CVE-2018-12615
2022-10-03 16:22:07
github
github
Phusion Passenger incorrect permission assignment
2022-05-13 01:49:37
cvelist
cvelist
CVE-2018-12615
2022-10-03 16:22:07