Description
In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed.
Unscored
CVE-2018-16398
EUVD-2018-8241GHSA-c7rw-xpw8-w7w7
In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in…
Published Sep 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre