Read the docs

anchore

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

anchore records in CISA KEV

No anchore vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Quill 3 records LOW Syft 2 records HIGH Anchore 1 record LOW Anchorectl 1 record LOW Container Image Scanner 1 record LOW Engine 1 record MEDIUM Stereoscope 1 record HIGH

Records

1 record in Engine · all components

TI-2020-08949 CVE-2020-11075

Shell Escape in Anchore Engine

Priority MEDIUM 46

In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an image analysis process.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01836 Published 2020-05-27 No fix listed CWE-114
Open these records in search →