Lucene search
+L

1 matches found

RubySec
RubySec
added 2022/05/13 12:0 a.m.23 views

Phusion Passenger incorrect permission assignment

An issue was discovered in switchGroup in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups gidset is not set correctly, leaving it up to randomness i.e., uninitialized memory which supplementary groups are actually being set while lowering privileges...

5.3CVSS3.4AI score0.01198EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder