En resumen
- CVE-2018-12021 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a github.com/hpcng/singularity, singularity (sylabs).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 73.7% de las vulnerabilidades.
- Solución: actualizar a 2.5.2 o posterior.
Description
Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.
NVD description
Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.
Más vulnerabilidades de github.com/hpcng/singularity
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free