CVE-2014-1831

CVE-2014-1831 describes a local symlink attack vulnerability in Phusion Passenger versions prior to 4.0.37. An attacker could exploit this to write to arbitrary files or directories by manipulating control_process.pid or generation-* files. The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N), indicating local access and low attack complexity are required, with only partial integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.