Description
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
Remediation
References
Related Vulnerabilities
Drupal Core 9.0.x Multiple Security Bypass Vulnerabilities (9.0.0 - 9.0.14)
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk SQL Injection (5.148)
Grafana Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-10452)
Joomla Deserialization of Untrusted Data Vulnerability (CVE-2019-11831)