Beveiligingsadvies

CVE-2018-12615

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-06-21 15:00:00

Laatst bijgewerkt 2024-09-17 04:24:12

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗