Singularity CVE-2019-11328 Insecure Permissions Local Privilege Escalation Vulnerability
BID:108360
CVE-2019-11328 |Info
Singularity CVE-2019-11328 Insecure Permissions Local Privilege Escalation Vulnerability
| Bugtraq ID: | 108360 |
| Class: | Design Error |
| CVE: |
CVE-2019-11328 |
| Remote: | No |
| Local: | Yes |
| Published: | May 14 2019 12:00AM |
| Updated: | May 14 2019 12:00AM |
| Credit: | Matthias Gerstner |
| Vulnerable: |
Sylabs Singularity 3.1 Sylabs Singularity 3.2.0-rc2 Sylabs Singularity 3.2.0-rc1 |
| Not Vulnerable: |
Sylabs Singularity 3.2 |
Discussion
Singularity CVE-2019-11328 Insecure Permissions Local Privilege Escalation Vulnerability
Singularity is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers. Other attacks are also possible.
Singularity 3.1.0 through 3.2.0-rc2 are vulnerable.
Singularity is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers. Other attacks are also possible.
Singularity 3.1.0 through 3.2.0-rc2 are vulnerable.
Exploit / POC
Singularity CVE-2019-11328 Insecure Permissions Local Privilege Escalation Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
Singularity CVE-2019-11328 Insecure Permissions Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.