Описание
HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configurations with security best practices requires minimizing privileges and avoiding root-level execution wherever possible.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.0 (включая) до 2.1.2 (исключая)
cpe:2.3:a:hcl:aion:*:*:*:*:*:*:*:*
EPSS
Процентиль: 3%
0.00127
Низкий
5.6 Medium
CVSS3
7.2 High
CVSS3
Дефекты
CWE-345
Связанные уязвимости
CVSS3: 5.6
github
5 месяцев назад
HCL AION is affected by a vulnerability where container base images are not properly authenticated. This may expose the system to potential security risks such as usage of untrusted container images, which could lead to unintended behaviour or security impact.
EPSS
Процентиль: 3%
0.00127
Низкий
5.6 Medium
CVSS3
7.2 High
CVSS3
Дефекты
CWE-345