2 matches found
SUSE-SU-2018:0262-1 Security update for rubygem-passenger
This update for rubygem-passenger fixes several issues. These security issues were fixed: - CVE-2017-16355: When Passenger was running as root it was possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choi...
4.7CVSS4.9AI score0.00358EPSS
SaveExploits0References5
SUSE-SU-2015:2337-1 Security update for rubygem-passenger
This update for rubygem-passenger fixes the following issues: - CVE-2015-7519: rubygem-passenger was not filtering the environment like apache is doing, allowing injection of environment variables bsc956281...
4.3CVSS4.4AI score0.02364EPSS
SaveExploits0References3
20