Vulnerability in Facebook Hiphop_virtual_machine
CVE-2014-2209
Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote attackers to bypass intended access restrictions by lever…
EPSS: 0.021 (79.4th percentile) — read the EPSS interpretation.
Affected products
- Facebook Hiphop_virtual_machine
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)