Vulnerability Details CVE-2018-12021
Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.5%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.8
References
Products affected by CVE-2018-12021
-
cpe:2.3:a:sylabs:singularity:2.3.0
-
cpe:2.3:a:sylabs:singularity:2.3.1
-
cpe:2.3:a:sylabs:singularity:2.3.2
-
cpe:2.3:a:sylabs:singularity:2.4
-
cpe:2.3:a:sylabs:singularity:2.4.1
-
cpe:2.3:a:sylabs:singularity:2.4.2
-
cpe:2.3:a:sylabs:singularity:2.4.3
-
cpe:2.3:a:sylabs:singularity:2.4.3-1
-
cpe:2.3:a:sylabs:singularity:2.4.4
-
cpe:2.3:a:sylabs:singularity:2.4.5
-
cpe:2.3:a:sylabs:singularity:2.4.6
-
cpe:2.3:a:sylabs:singularity:2.5.0
-
cpe:2.3:a:sylabs:singularity:2.5.1