Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Web Server

Phusion Passenger

Phusion Passenger is a web server and application server designed to be fast robust and lightweight.

Official Site:

https://www.phusionpassenger.com/

Severity Summary:

Critical: 1 High: 4 Medium: 4 Low: 2
Reference
Title
Severity
CVE-2018-12026
Phusion Passenger Improper Link Resolution Before File Access (Link Following) Vulnerability
Critical
CVE-2018-12029
Phusion Passenger Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability
High
CVE-2018-12028
Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability
High
CVE-2018-12027
Phusion Passenger Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2016-10345
Phusion Passenger Permissions Privileges and Access Controls Vulnerability
High
CVE-2018-12615
Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability
Medium
CVE-2017-16355
Phusion Passenger Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2013-2119
Phusion Passenger Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2013-4136
Phusion Passenger Improper Link Resolution Before File Access (Link Following) Vulnerability
Medium
CVE-2014-1832
Phusion Passenger Other Vulnerability
Low
CVE-2014-1831
Phusion Passenger Other Vulnerability
Low