Lucene search
GoogleOSV:GHSA-J249-GHV5-7MXVHistoryMay 24, 2022 - 4:50 p.m.
Secret insertion into debug log in Docker
2022-05-2416:50:40
Google
osv.dev
7
0.042 Low
EPSS
Percentile
92.3%
In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/docker/docker | lt | 18.09.8 |
Related
osv
osv
CVE-2019-13509
2019-07-18 16:15:11
docker.io - security update
2019-09-09 00:00:00
nvd
nvd
CVE-2019-13509
2019-07-18 16:15:11
alpinelinux
alpinelinux
CVE-2019-13509
2019-07-18 16:15:11
nessus
nessus
Fedora 29 : 2:docker (2019-4bed83e978)
2019-08-28 00:00:00
EulerOS 2.0 SP8 : docker-engine (EulerOS-SA-2020-1283)
2020-03-20 00:00:00
Fedora 30 : 2:docker (2019-5b54793a4a)
2019-08-28 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-13509 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
openvas
openvas
Fedora Update for docker FEDORA-2019-5b54793a4a
2019-08-29 00:00:00
Docker < 18.09.8 Information Disclosure Vulnerability
2019-07-29 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2020-1283)
2020-03-20 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: docker-1.13.1-68.git47e2230.fc30
2019-08-27 15:28:34
[SECURITY] Fedora 29 Update: docker-1.13.1-68.git47e2230.fc29
2019-08-27 18:38:02
prion
prion
Design/Logic Flaw
2019-07-18 16:15:00
veracode
veracode
Information Disclosure
2020-05-10 23:25:40
cve
cve
CVE-2019-13509
2019-07-18 16:15:11
ubuntucve
ubuntucve
CVE-2019-13509
2019-07-18 00:00:00
cvelist
cvelist
CVE-2019-13509
2019-07-18 15:34:59
github
github
Secret insertion into debug log in Docker
2022-05-24 16:50:40
redhatcve
redhatcve
CVE-2019-13509
2019-07-23 11:21:44
debiancve
debiancve
CVE-2019-13509
2019-07-18 16:15:11
amazon
amazon
Medium: docker
2019-11-04 18:12:00
oraclelinux
oraclelinux
docker-engine security update
2019-10-03 00:00:00
debian
debian
[SECURITY] [DSA 4521-1] docker.io security update
2019-09-09 20:55:48
photon
photon
Important Photon OS Security Update - PHSA-2020-0085
2020-05-02 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0085
2020-05-02 00:00:00
suse
suse