Lucene search
PRIOn knowledge basePRION:CVE-2015-1843HistoryApr 06, 2015 - 3:59 p.m.
Authentication flaw
2015-04-0615:59:00
PRIOn knowledge base
www.prio-n.com
2
The Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic. NOTE: this vulnerability exists because of a CVE-2014-5277 regression.
| CPE | Name | Operator | Version |
|---|---|---|---|
| docker | eq | <= 1.5.0-27 |
Related
redhat
redhat
(RHSA-2015:0776) Moderate: docker security update
2015-04-02 00:00:00
debiancve
debiancve
CVE-2015-1843
2015-04-06 15:59:00
CVE-2014-5277
2014-11-17 16:59:01
cve
cve
CVE-2015-1843
2015-04-06 15:59:00
CVE-2014-5277
2014-11-17 16:59:01
cvelist
cvelist
CVE-2015-1843
2015-04-06 15:00:00
CVE-2014-5277
2014-11-17 16:00:00
nessus
nessus
RHEL 7 : docker (RHSA-2015:0776)
2015-04-03 00:00:00
openSUSE Security Update : docker / go (openSUSE-SU-2014:1411-1)
2014-11-14 00:00:00
ubuntucve
ubuntucve
CVE-2015-1843
2015-04-06 00:00:00
CVE-2014-5277
2014-11-17 00:00:00
nvd
nvd
CVE-2015-1843
2015-04-06 15:59:00
CVE-2014-5277
2014-11-17 16:59:01
github
github
Man-in-the-Middle (MitM)
2022-02-15 01:57:18
osv
osv
Man-in-the-Middle (MitM)
2022-02-15 01:57:18
PYSEC-2014-80
2014-11-17 16:59:00
cbl_mariner
cbl_mariner
CVE-2014-5277 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
openvas
openvas
Docker < 1.3.1 SSL Fallback Vulnerability
2021-09-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1648-1)
2021-04-19 00:00:00
prion
prion
Authentication flaw
2014-11-17 16:59:00
securityvulns
securityvulns
Docker 1.3.2 - Security Advisory [24 Nov 2014]
2014-12-01 00:00:00
Docker multiple security vulnerabilities
2014-12-22 00:00:00
ibm
ibm