[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOtSSYnf66vrhTPeii2sZSJpr9TSjhMIX7athVqLPogU":3,"g5a-risk:CVE-2023-38496":121},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":61,"weaknesses":62,"weaknessesCount":77,"isActivelyExploited":78,"cisaInfo":26,"otxData":26,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":116,"notableEvents":117},"CVE-2023-38496","What is CVE-2023-38496?","Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1.","Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefor...","2023-07-25T22:15:10.503","2023-08-02T19:32:49.44",3.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED",null,1.8,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":37},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":34,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H","HIGH",6.1,"MEDIUM",4.2,0.0026,[38,38,38,38,38,38,38],"Low",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"lfprojects","apptainer","1.2.0","cpe:2.3:a:lfprojects:apptainer:1.2.0:-:*:*:*:go:*:*",1,[49,54,57],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fgithub.com\u002Fapptainer\u002Fapptainer\u002Fpull\u002F1523","GitHub",[53],"Patch",{"url":55,"source":51,"tags":56},"https:\u002F\u002Fgithub.com\u002Fapptainer\u002Fapptainer\u002Fpull\u002F1578",[53],{"url":58,"source":51,"tags":59},"https:\u002F\u002Fgithub.com\u002Fapptainer\u002Fapptainer\u002Fsecurity\u002Fadvisories\u002FGHSA-mmx5-32m4-wxvx",[53,60],"Vendor Advisory",3,[63,71],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":69,"structure":70},"CWE-271","Privilege Dropping \u002F Lowering Errors","The product does not drop privileges before passing control of a resource to an actor that does not have those privileges.","In some contexts, a system executing with elevated permissions will hand off a process\u002Ffile\u002Fetc. to another process or user. If the privileges of an entity are not reduced, then elevated privileges are spread throughout a system and possibly to an attacker.","Incomplete",2,false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2023-38496? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-38496, a low severity cyber security vulnerability from 2023. Apptainer is an open source container platform. Version 1.2....","CVE-2023-38496, CVE-2023-38496 vulnerability, CVE-2023-38496 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, lfprojects security, apptainer vulnerability","\u002Fwhat-is\u002Fcve-2023-38496",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-38496","Cybersecurity","CVE-2023-38496, CVE-2023-38496 vulnerability, CVE-2023-38496 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":26,"Negate":26,"Nodes":107},[108],{"Operator":109,"Negate":26,"CPEMatch":110},"OR",[111,113],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7B4FFEA3-9FB9-4B9F-968E-E5C3282B6786",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:lfprojects:apptainer:1.2.0:rc2:*:*:*:go:*:*","35B641D0-6C93-45F0-A297-1BBE3BF65DB6",[],[],{"lastModified":11,"cacheTime":119,"version":120},1792364811831,"2.0",{"score":122,"band":40,"action":123,"scoredAt":124},21,"Monitor","2026-10-16T06:58:43.006373+00:00"]