CVE-2018-16398

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in which "docker…

published September 3, 2018

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01390 · 72.1th percentile
Published
2018-09-03T19:00Z
EPSS history
Timeline
  • 03 SEP 19:00Z
    In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in which "docker…
    cvelistv5