Twistlock: >> Authz Broker Security Vulnerabilities
In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed.
CVSS Score
7.5
EPSS Score
0.002
Published
2018-09-03