CVE-2021-3101CWE-250
Hotdog Container Escape
High · published April 19, 2022
What it is
Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00391 · 32.0th percentile
- Weakness
- CWE-250 · Execution with Unnecessary Privileges
- Published
- 2022-04-19T22:15Z
EPSS history
Timeline
19 APR 22:15Z
Hotdog Container Escape
cvelistv5