Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploit7F7BFFFC-900A-54A0-8C6F-CC4AB00224C5
HistoryMay 02, 2023 - 7:25 a.m.

Exploit for Incorrect Permission Assignment for Critical Resource in Mobyproject Moby

2023-05-0207:25:13
605
mobyproject moby
cve-2021-41091
privilege escalation
improper permissions
overlay filesystem
docker
vulnerability
exploit script
setuid
linux
directory permissions
security
mitigation
update
cyberark
threat research

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.5%

JSON

CVE-2021-41091

This exploit offers an in-depth look at the CV…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

prion 1
cve 1
osv 4
nessus 23
cvelist 1
alpinelinux 1
ubuntucve 1
veracode 1
debiancve 1
githubexploit 2
redhatcve 1
nvd 1
github 1
openvas 17
amazon 1
mageia 1
fedora 4
ibm 4
suse 3
thn 1
ics 1
gentoo 1
redhat 1
prion
prion
Design/Logic Flaw
2021-10-04 21:15:00
cve
cve
CVE-2021-41091
2021-10-04 21:15:12
osv
osv
Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker
2024-06-28 15:28:53
CVE-2021-41091
2021-10-04 21:15:12
Moby (Docker Engine) Insufficiently restricted permissions on data directory
2024-01-31 23:28:58
nessus
nessus
Siemens SCALANCE LPE9403 Incorrect Permission Assignment for Critical Resource (CVE-2021-41091)
2024-01-15 00:00:00
RHEL 7 : moby (Unpatched Vulnerability)
2024-05-11 00:00:00
NewStart CGSL CORE 5.04 / MAIN 5.04 : docker-ce Multiple Vulnerabilities (NS-SA-2022-0018)
2022-05-10 00:00:00
cvelist
cvelist
CVE-2021-41091 Insufficiently restricted permissions on data directory in Docker Engine
2021-10-04 20:20:09
alpinelinux
alpinelinux
CVE-2021-41091
2021-10-04 21:15:12
ubuntucve
ubuntucve
CVE-2021-41091
2021-10-04 00:00:00
veracode
veracode
Privilege Escalation
2021-10-05 03:06:38
debiancve
debiancve
CVE-2021-41091
2021-10-04 21:15:12
githubexploit
githubexploit
Exploit for Incorrect Permission Assignment for Critical Resource in Mobyproject Moby
2024-06-30 10:57:02
Exploit for Incorrect Permission Assignment for Critical Resource in Mobyproject Moby
2024-05-10 04:42:35
redhatcve
redhatcve
CVE-2021-41091
2021-11-15 18:14:39
nvd
nvd
CVE-2021-41091
2021-10-04 21:15:12
github
github
Moby (Docker Engine) Insufficiently restricted permissions on data directory
2024-01-31 23:28:58
openvas
openvas
Huawei EulerOS: Security Advisory for docker (EulerOS-SA-2022-2265)
2022-08-18 00:00:00
Mageia: Security Advisory (MGASA-2021-0500)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2022-2311)
2022-09-14 00:00:00
amazon
amazon
Medium: docker
2021-09-30 19:22:00
mageia
mageia
Updated docker packages fix security vulnerabilities
2021-10-31 14:12:48
fedora
fedora
[SECURITY] Fedora 34 Update: moby-engine-20.10.9-1.fc34
2021-10-19 00:37:23
[SECURITY] Fedora 34 Update: containerd-1.5.7-1.fc34
2021-10-19 00:37:23
[SECURITY] Fedora 35 Update: moby-engine-20.10.9-1.fc35
2021-10-29 23:24:02
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Docker affect IBM InfoSphere Information Server
2022-10-14 21:28:51
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:56:36
Security Bulletin: IBM Storage Ceph is vulnerable to Files or Directories Accessible to External Parties in Grafana (CVE-2021-41089, CVE-2022-24769, CVE-2021-41091, CVE-2018-20699, CVE-2022-36109)
2024-08-05 19:51:45
suse
suse
Security update for containerd, docker (moderate)
2022-02-04 00:00:00
Security update for containerd, docker, runc (important)
2021-10-25 00:00:00
Security update for containerd, docker, runc (important)
2021-10-31 00:00:00
thn
thn
Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes
2024-04-18 05:54:00
ics
ics
Siemens SCALANCE LPE9403 Third-Party Vulnerabilities
2022-06-16 12:00:00
gentoo
gentoo
Docker: Multiple Vulnerabilities
2024-09-28 00:00:00
redhat
redhat
(RHSA-2022:0735) Important: Red Hat Advanced Cluster Management 2.4.2 security updates and bug fixes
2022-03-03 01:33:59

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.5%

JSON
Related for 7F7BFFFC-900A-54A0-8C6F-CC4AB00224C5
prion1cve1osv4nessus23cvelist1alpinelinux1ubuntucve1veracode1debiancve1githubexploit2redhatcve1nvd1github1openvas17amazon1mageia1fedora4ibm4suse3thn1ics1gentoo1redhat1