Lucene search
GoogleOSV:GHSA-8W94-CF6G-C8MGHistoryFeb 15, 2022 - 1:57 a.m.
Man-in-the-Middle (MitM)
2022-02-1501:57:18
Google
osv.dev
8
0.001 Low
EPSS
Percentile
49.2%
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/docker/docker | lt | 1.3.1 |
References
lists.opensuse.org/opensuse-updates/2014-11/msg00048.html
github.com/docker/docker
github.com/docker/docker/commit/8caacb18f8019dfda30d79c327397e5f5783c068
groups.google.com/forum/#!topic/docker-user/oYm0i3xShJU
groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU
nvd.nist.gov/vuln/detail/CVE-2014-5277
web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5277
Related
debiancve
debiancve
CVE-2014-5277
2014-11-17 16:59:01
CVE-2015-1843
2015-04-06 15:59:00
github
github
Man-in-the-Middle (MitM)
2022-02-15 01:57:18
cve
cve
CVE-2014-5277
2014-11-17 16:59:01
CVE-2015-1843
2015-04-06 15:59:00
cvelist
cvelist
CVE-2014-5277
2014-11-17 16:00:00
CVE-2015-1843
2015-04-06 15:00:00
ubuntucve
ubuntucve
CVE-2014-5277
2014-11-17 00:00:00
CVE-2015-1843
2015-04-06 00:00:00
osv
osv
PYSEC-2014-80
2014-11-17 16:59:00
cbl_mariner
cbl_mariner
CVE-2014-5277 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
openvas
openvas
Docker < 1.3.1 SSL Fallback Vulnerability
2021-09-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1648-1)
2021-04-19 00:00:00
prion
prion
Authentication flaw
2014-11-17 16:59:00
Authentication flaw
2015-04-06 15:59:00
nvd
nvd
CVE-2014-5277
2014-11-17 16:59:01
CVE-2015-1843
2015-04-06 15:59:00
nessus
nessus
openSUSE Security Update : docker / go (openSUSE-SU-2014:1411-1)
2014-11-14 00:00:00
RHEL 7 : docker (RHSA-2015:0776)
2015-04-03 00:00:00
redhat
redhat
(RHSA-2015:0776) Moderate: docker security update
2015-04-02 00:00:00
securityvulns
securityvulns
Docker 1.3.2 - Security Advisory [24 Nov 2014]
2014-12-01 00:00:00
Docker multiple security vulnerabilities
2014-12-22 00:00:00