CVE-2018-16398

The CVE-2018-16398 entry covers Twistlock AuthZ Broker 0.1, where regular expressions are mishandled, enabling a policy bypass via crafted URLs such as containers/aa/pause?aaa=/start. The vulnerability stems from weak URL-regex handling that allows a command like 'docker start' to be permitted wh...