CVE-2020-13845 - CVE House
Back to Database
Status published High CVE-2020-13845

Sylabs Singularity 3.0 through 3.5 has Improper Validation of an...

Vulnerability Description

Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compared against the signature object descriptor(s) in the SIF file, rather than to a cryptographically validated signature.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13845

Credits & Attribution

No credits recorded in the NVD database.

References

More from sylabs

View All →
CVE-2025-64750
Singluarity ineffectively applies of selinux / apparmor LSM process labels
Medium 4.5
CVE-2022-39237
Digital Signature Hash Algorithms Not Validated in sylabs/sif
Medium 6.3
CVE-2022-23538
User credentials leaked to third-party service via HTTP redirect in scs-library-client
Medium 5.2
CVE-2021-33622
Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has...
Critical 9.8
CVE-2021-33027
Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a...
Critical 9.8

Affected Vendor

Affected Software

singularity
Vulnerable Versions:
3.0.0

Timeline

Official Publish: July 14th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.