CVE-2024-41903

Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V2.0

Description: The issue is related to insecure privilege management in the SINEC Traffic Analyzer, which can allow a remote attacker to modify the container's filesystem, leading to unauthorized modifications and data corruption. The affected application mounts the container's root filesystem with read and write privileges.

Recommendations: For versions prior to V2.0, update to version V2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the container's root filesystem to minimize the risk of exploitation.