Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6834
HistoryJun 22, 2018 - 2:35 a.m.

Privilege Escalation

2018-06-2202:35:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

31.3%

Phusion Passenger is vulnerable to privilege escalation. The gidset variable that manages group permissions is not set properly, leaving group permissions to be assigned at random due to a uninitialized buffer.

CPENameOperatorVersion
passengerle5.3.1

0.001 Low

EPSS

Percentile

31.3%