EUVD-2018-8241

Malware in sbrugna...

CVE-2018-16398

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

Code injection

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

CVE-2018-16398

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

CVE-2018-16398

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

CVE-2018-16398

The CVE-2018-16398 entry covers Twistlock AuthZ Broker 0.1, where regular expressions are mishandled, enabling a policy bypass via crafted URLs such as containers/aa/pause?aaa=/start. The vulnerability stems from weak URL-regex handling that allows a command like 'docker start' to be permitted wh...

CVE-2018-16398: Undefined Security Weakness

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

PT-2018-13547

Name of the Vulnerable Software and Affected Versions Twistlock AuthZ Broker version 0.1 Description The issue concerns the mishandling of regular expressions, which can be exploited to bypass policies. For example, the API endpoint "containers/aa/pause?aaa=/start" can be used to bypass a policy...