Authorization Bypass

2022-08-1704:34:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

authorization

bypass

docker

container

permissions

attacker

unauthorized actions

EPSS

Percentile

12.6%

JSON

github.com/automationbroker/apb is vulnerable to authorization bypass. The vulnerability exists because the docker container grants all users sudoer permissions which allows an attacker to access the running container and perform unauthorized actions.