CVE-2016-10345

CVE-2016-10345 describes a local privilege escalation vulnerability in Phusion Passenger versions prior to 5.1.0. During the passenger-install-nginx-module execution, a predictable temporary filename was used, allowing a local attacker to gain the privileges of the passenger user. This vulnerability is rated as High severity (CVSS 7.8), indicating a low attack complexity and the potential for high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.