VULNERABILITY INTELLIGENCE

CVE-2016-1582

CVSS score5.5 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2016-06-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references