Singularity Information Disclosure Vulnerability (CNVD-2020-03164)

Singularity is a Linux-based container platform for running standalone applications. A security vulnerability exists in Singularity versions 3.3.0 through 3.5.1, which stems from a program that sets insecure permissions 777 for $HOME/.singularity. An attacker can exploit the vulnerability to...

CVE-2019-19724: Incorrect Default Permissions

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...