CVE-2018-12021

—

CVSS 3.0

6.5 medium

EPSS

2%p74

Published

Jul 5, 2018 (Jul 5, 2018)

Modified

Jun 17, 2026

Description

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

Vendors: sylabs
Products: singularity
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.