CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: an issue was discovered in switchgroup() in agent/exechelper/exechelpermain.cpp in phusion passenger before 5.3.2. the set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-06-21
Last Modified Date: 2019-10-03
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Incorrect Permission Assignment for Critical Resource.
user
CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: an issue was discovered in switchgroup() in agent/exechelper/exechelpermain.cpp in phusion passenger before 5.3.2. the set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-06-21
Last Modified Date: 2019-10-03
assistant