cve/2016/CVE-2016-10345.md
2024-05-26 14:27:05 +02:00

645 B

CVE-2016-10345

Description

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.

POC

Reference

No PoCs from references.

Github