EUVD-2018-8241

Malware in sbrugna...

Code injection

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

CVE-2018-16398

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

CVE-2018-16398

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed...

CVE-2018-16398

The CVE-2018-16398 entry covers Twistlock AuthZ Broker 0.1, where regular expressions are mishandled, enabling a policy bypass via crafted URLs such as containers/aa/pause?aaa=/start. The vulnerability stems from weak URL-regex handling that allows a command like 'docker start' to be permitted wh...