CVE-2018-12026 | BDVDB-2026-102724 Detail

Description#

During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-06-17Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.