Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Singularity 安全漏洞
Vulnerability Description
Singularity是一款基于Linux平台的用于独立运行应用程序的容器平台。 Singularity 3.3.0版本至3.5.1版本中存在安全漏洞，该漏洞源于程序为$HOME/.singularity设置了不安全的权限（777）。攻击者可利用该漏洞泄露信息或执行恶意的重定向操作。
CVSS Information
N/A
Vulnerability Type
N/A