Lucene search
PRIOn knowledge basePRION:CVE-2020-13845HistoryJul 14, 2020 - 6:15 p.m.
Input validation
2020-07-1418:15:00
PRIOn knowledge base
www.prio-n.com
2
0.002 Low
EPSS
Percentile
55.5%
Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compared against the signature object descriptor(s) in the SIF file, rather than to a cryptographically validated signature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| singularity | ge | 3.0.0 | |
| singularity | le | 3.5.0 |
Related
alpinelinux
alpinelinux
CVE-2020-13845
2020-07-14 18:15:14
github
github
Execution Control List (ECL) Is Insecure in Singularity
2021-12-20 18:24:30
debiancve
debiancve
CVE-2020-13845
2020-07-14 18:15:14
veracode
veracode
Authorization Bypass
2020-09-21 04:54:22
cvelist
cvelist
CVE-2020-13845
2020-07-14 17:23:08
cve
cve
CVE-2020-13845
2020-07-14 18:15:14
osv
osv
CVE-2020-13845
2020-07-14 18:15:14
Execution Control List (ECL) Is Insecure in Singularity
2021-12-20 18:24:30
ubuntucve
ubuntucve
CVE-2020-13845
2020-07-14 00:00:00
nvd
nvd
CVE-2020-13845
2020-07-14 18:15:14
nessus
nessus
openSUSE Security Update : singularity (openSUSE-2020-1011)
2020-07-20 00:00:00
openSUSE Security Update : singularity (openSUSE-2020-1037)
2020-07-27 00:00:00
suse
suse
Security update for singularity (important)
2020-09-18 00:00:00
Security update for singularity (important)
2020-07-19 00:00:00
Security update for singularity (important)
2020-07-23 00:00:00
openvas
openvas
openSUSE: Security Advisory for singularity (openSUSE-SU-2020:1011-1)
2020-07-20 00:00:00
openSUSE: Security Advisory for singularity (openSUSE-SU-2020:1037-1)
2020-07-24 00:00:00