Container RootFS Privilege Escalation Vulnerability

CVE-2024-41903

Summary

A security vulnerability has been identified in the SINEC Traffic Analyzer, specifically in versions prior to V2.0. The application mounts the container's root filesystem with excessive privileges, allowing an attacker to potentially modify the filesystem. This situation poses risks of unauthorized changes to critical data and could lead to significant data corruption, compromising the integrity of the SINEC Traffic Analyzer system. Organizations using this product should evaluate their security posture in light of this vulnerability.

References