CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-16355

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 34.2%

CVSS Severity

CVSS v3 Score 4.7

CVSS v2 Score 1.2

References

Products affected by CVE-2017-16355

Phusion » Passenger » Version: 5.0.10

cpe:2.3:a:phusion:passenger:5.0.10
Phusion » Passenger » Version: 5.0.11

cpe:2.3:a:phusion:passenger:5.0.11
Phusion » Passenger » Version: 5.0.12

cpe:2.3:a:phusion:passenger:5.0.12
Phusion » Passenger » Version: 5.0.13

cpe:2.3:a:phusion:passenger:5.0.13
Phusion » Passenger » Version: 5.0.14

cpe:2.3:a:phusion:passenger:5.0.14
Phusion » Passenger » Version: 5.0.15

cpe:2.3:a:phusion:passenger:5.0.15
Phusion » Passenger » Version: 5.0.16

cpe:2.3:a:phusion:passenger:5.0.16
Phusion » Passenger » Version: 5.0.17

cpe:2.3:a:phusion:passenger:5.0.17
Phusion » Passenger » Version: 5.0.18

cpe:2.3:a:phusion:passenger:5.0.18
Phusion » Passenger » Version: 5.0.19

cpe:2.3:a:phusion:passenger:5.0.19
Phusion » Passenger » Version: 5.0.20

cpe:2.3:a:phusion:passenger:5.0.20
Phusion » Passenger » Version: 5.0.21

cpe:2.3:a:phusion:passenger:5.0.21
Phusion » Passenger » Version: 5.0.22

cpe:2.3:a:phusion:passenger:5.0.22
Phusion » Passenger » Version: 5.0.23

cpe:2.3:a:phusion:passenger:5.0.23
Phusion » Passenger » Version: 5.0.24

cpe:2.3:a:phusion:passenger:5.0.24
Phusion » Passenger » Version: 5.0.25

cpe:2.3:a:phusion:passenger:5.0.25
Phusion » Passenger » Version: 5.0.26

cpe:2.3:a:phusion:passenger:5.0.26
Phusion » Passenger » Version: 5.0.27

cpe:2.3:a:phusion:passenger:5.0.27
Phusion » Passenger » Version: 5.0.28

cpe:2.3:a:phusion:passenger:5.0.28
Phusion » Passenger » Version: 5.0.29

cpe:2.3:a:phusion:passenger:5.0.29
Phusion » Passenger » Version: 5.0.30

cpe:2.3:a:phusion:passenger:5.0.30
Phusion » Passenger » Version: 5.1.0

cpe:2.3:a:phusion:passenger:5.1.0
Phusion » Passenger » Version: 5.1.1

cpe:2.3:a:phusion:passenger:5.1.1
Phusion » Passenger » Version: 5.1.10

cpe:2.3:a:phusion:passenger:5.1.10
Phusion » Passenger » Version: 5.1.2

cpe:2.3:a:phusion:passenger:5.1.2
Phusion » Passenger » Version: 5.1.3

cpe:2.3:a:phusion:passenger:5.1.3
Phusion » Passenger » Version: 5.1.4

cpe:2.3:a:phusion:passenger:5.1.4
Phusion » Passenger » Version: 5.1.5

cpe:2.3:a:phusion:passenger:5.1.5
Phusion » Passenger » Version: 5.1.6

cpe:2.3:a:phusion:passenger:5.1.6
Phusion » Passenger » Version: 5.1.7

cpe:2.3:a:phusion:passenger:5.1.7
Phusion » Passenger » Version: 5.1.8

cpe:2.3:a:phusion:passenger:5.1.8
Phusion » Passenger » Version: 5.1.9

cpe:2.3:a:phusion:passenger:5.1.9
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-16355

Products

Pricing

Contact Us