Описание
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
Отчет
This issue affects the versions of mod_wsgi as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | mod_wsgi | Will not fix | ||
| Red Hat Enterprise Linux 7 | mod_wsgi | Will not fix | ||
| Red Hat OpenShift Enterprise 2 | python27-mod_wsgi | Will not fix | ||
| Red Hat Satellite 5 | mod_wsgi | Will not fix | ||
| Red Hat Satellite 6 | mod_wsgi | Will not fix | ||
| Red Hat Software Collections | python27-mod_wsgi | Will not fix | ||
| Red Hat Software Collections | python33-mod_wsgi | Will not fix | ||
| Red Hat Subscription Asset Manager | mod_wsgi | Will not fix |
Показывать по
Дополнительная информация
Статус:
6.9 Medium
CVSS2
Связанные уязвимости
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group ...
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
6.9 Medium
CVSS2