CVE-2012-6135

Name of the Vulnerable Software and Affected Versions RubyGems passenger versions 4.0.0.beta1 through 4.0.0.beta2

Description The issue allows remote attackers to delete arbitrary files during the startup process. It affects both open source and Enterprise versions.

Recommendations For versions 4.0.0.beta1 and 4.0.0.beta2, consider restricting access to sensitive files during the startup process until a patch is available. As a temporary workaround, consider disabling the startup process temporarily to prevent exploitation.