Singularity insecure permissions
Insecure permissions (777) are set on `$HOME/.singularity` when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19724US | high7.5OT elevated | — | ||
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicio… | ||||
02
references
External citations — patches, advisories, analysis.
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00025.htmlWEB
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.htmlWEB
- https://github.com/sylabs/singularityPACKAGE
- https://github.com/sylabs/singularity/commit/2cda4981812c29f0fb11d3ea6aaf6139f665a631WEB
- https://github.com/sylabs/singularity/releases/tag/v3.5.2WEB
- https://nvd.nist.gov/vuln/detail/CVE-2019-19724ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan