Описание
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
Ссылки
- Release NotesThird Party Advisory
- Release NotesThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.3.0 (включая) до 3.5.1 (включая)
cpe:2.3:a:sylabs:singularity:*:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00313
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-276
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 6 лет назад
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
CVSS3: 7.5
debian
около 6 лет назад
Insecure permissions (777) are set on $HOME/.singularity when it is ne ...
EPSS
Процентиль: 54%
0.00313
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-276