CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: an issue was discovered in switchgroup() in agent/exechelper/exechelpermain.cpp in phusion passenger before 5.3.2. the set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-06-21
Last Modified Date: 2019-10-03