Comment by delamon
3 hours ago
The attack gives you ability to overwrite any cached page. So you don't need to be root to "edit" /etc/passwd.
3 hours ago
The attack gives you ability to overwrite any cached page. So you don't need to be root to "edit" /etc/passwd.
Not of the host system, assuming we're talking about a compromised VM, running as a non-root user.
I assume you mean container, not VM. But yes, container makes it harder.