Lucene search
K

4 matches found

Veracode
Veracode
added 2025/04/08 3:39 a.m.1 views

Unauthorized File Access

awssamcli is vulnerable to Unauthorized File Access. The vulnerability is due to improper handling of symlinks during the Docker build process, allowing access to privileged host files via elevated permissions...

6.9CVSS7AI score0.00121EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/03/31 4:15 p.m.3 views

CVE-2025-3047

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

6.9CVSS7AI score
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:36 a.m.1 views

SUSE CVE-2021-43816

containerd is an open source container runtime. On installations using SELinux, such as EL8 CentOS, RHEL, Fedora, or SUSE MicroOS, with containerd since v1.5.0-beta.0 as the backing container runtime interface CRI, an unprivileged pod scheduled to the node may bind mount, via hostPath volume, any...

9.1CVSS7.1AI score0.00147EPSS
Exploits1References3
OSV
OSV
added 2022/01/05 7:15 p.m.1 views

DEBIAN-CVE-2021-43816

containerd is an open source container runtime. On installations using SELinux, such as EL8 CentOS, RHEL, Fedora, or SUSE MicroOS, with containerd since v1.5.0-beta.0 as the backing container runtime interface CRI, an unprivileged pod scheduled to the node may bind mount, via hostPath volume, any...

9.1CVSS7.2AI score0.00147EPSS
Exploits1References1
Rows per page
Query Builder