CWE Code: 254
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name: 7PK - Security Features
Summary: mod_wsgi before 4.2.4 for apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-12-16
Last Modified Date: 2017-07-01