← All advisories

High severity7.5NVD Advisory· Published Nov 19, 2019· Updated Jun 16, 2026

CVE-2012-6135

CVE-2012-6135

Description

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
passengerRubyGems	< 4.0.0.rc4	4.0.0.rc4

Affected products

5

Phusion/Passenger2 versions
cpe:2.3:a:phusion:passenger:4.0.0:beta1:*:*:*:ruby:*:*+ 1 more
- cpe:2.3:a:phusion:passenger:4.0.0:beta1:*:*:*:ruby:*:*
- cpe:2.3:a:phusion:passenger:4.0.0:beta2:*:*:*:ruby:*:*
Red Hat/Openshift
cpe:2.3:a:redhat:openshift:1.0:*:*:*:enterprise:*:*:*
ghsa-coords
pkg:gem/passenger
Range: < 4.0.0.rc4
Phusion/Ruby Passengerv5
Range: 4.0.53-1

Patches

Vulnerability mechanics

References

11

www.openwall.com/lists/oss-security/2013/03/02/1nvdMailing ListPatchThird Party AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/82533nvdThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-8mw8-j583-vqfgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2012-6135ghsaADVISORY
security-tracker.debian.org/tracker/CVE-2012-6135nvdThird Party AdvisoryWEB
www.securityfocus.com/bid/58259nvdThird Party AdvisoryVDB Entry
github.com/phusion/passenger/commit/8c6693e0818772c345c979840d28312c2edd4ba4ghsaWEB
github.com/phusion/passenger/commit/8c6693e0818772c345c979840d28312c2edd4ba4ghsaWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2012-6135.ymlghsaWEB
web.archive.org/web/20200918164919/https://old.blog.phusion.nl/2013/03/05/phusion-passenger-4-0-beta-1-and-2-arbitrary-file-deletion-vulnerabilityghsaWEB

News mentions

0

No linked articles in our index yet.