Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3m9h-mw45-63hc

Опубликовано: 16 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

HCL AION is affected by a vulnerability where container base images are not properly authenticated. This may expose the system to potential security risks such as usage of untrusted container images, which could lead to unintended behaviour or security impact.

HCL AION is affected by a vulnerability where container base images are not properly authenticated. This may expose the system to potential security risks such as usage of untrusted container images, which could lead to unintended behaviour or security impact.

EPSS

Процентиль: 3%
0.00127
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 5.6
nvd
5 месяцев назад

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configurations with security best practices requires minimizing privileges and avoiding root-level execution wherever possible.

EPSS

Процентиль: 3%
0.00127
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-345