GitHub Advisory DatabaseGHSA-44GG-PMQR-4669Access Restriction Bypass in Docker
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.1%
Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/docker/docker | lt | 1.3.2 |
References
docs.docker.com/v1.3/release-notes/
github.com/advisories/GHSA-44gg-pmqr-4669
github.com/docker/docker/commit/c9379eb3fbbc484c056f5a5e49d8d0b755a29c45
lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html
lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html
nvd.nist.gov/vuln/detail/CVE-2014-6408
secunia.com/advisories/60171
secunia.com/advisories/60241
web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6408
www.openwall.com/lists/oss-security/2014/11/24/5
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.1%