Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4x32-h296-rg6j

Опубликовано: 14 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Singularity Incorrect Access Control

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

Пакеты

Наименование

github.com/hpcng/singularity

go
Затронутые версииВерсия исправления

>= 2.3.0, <= 2.5.1

2.5.2

EPSS

Процентиль: 66%
0.00516
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

CVSS3: 6.5
nvd
больше 7 лет назад

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

CVSS3: 6.5
debian
больше 7 лет назад

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access con ...

suse-cvrf
больше 7 лет назад

Security update for singularity

EPSS

Процентиль: 66%
0.00516
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-200