| Package | Affected versions | Patched versions |
|---|---|---|
| passenger | ≥ 4.0.1, < 4.0.5< 3.0.21 | 4.0.53.0.21 |
| passenger | = 3.0.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 4.0.1= 4.0.2= 4.0.3= 4.0.4≤ 3.0.20 | |
| openshift | = 1.0 |
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free