Vulnerabilities > CVE-2021-33027 - Insufficient Entropy vulnerability in Sylabs Singularity

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

NVD

Published: 2021-07-19

Updated: 2021-07-28

Summary

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.

Part	Description	Count
Application	Sylabs Sylabs Singularity 1.2.0 Sylabs Singularity 1.3.0 Sylabs Singularity 1.4.0 Sylabs Singularity 1.5.0 Sylabs Singularity 1.6.0	5

Session Credential Falsification through Prediction
This attack targets predictable session ID in order to gain privileges. The attacker can predict the session ID used during a transaction to perform spoofing and session hijacking.