Singularity Information Disclosure Vulnerability (CNVD-2020-03164)

Singularity is a Linux-based container platform for running standalone applications. A security vulnerability exists in Singularity versions 3.3.0 through 3.5.1, which stems from a program that sets insecure permissions 777 for $HOME/.singularity. An attacker can exploit the vulnerability to...