Lucene search

K
f5F5F5:K15322
HistoryJun 05, 2014 - 12:00 a.m.

K15322 : PHP vulnerability CVE-2014-0185

2014-06-0500:00:00
my.f5.com
19

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Security Advisory Description

sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client. (CVE-2014-0185)

Impact

None. No F5 products are vulnerable to this vulnerability.