CVE-2019-19724

—

CVSS 3.1

7.5 high

EPSS

1%p67

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.

Vendors: sylabs
Products: singularity
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.