Design/Logic Flaw

2019-07-1816:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.042 Low

EPSS

Percentile

92.3%

JSON

In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.

CPENameOperatorVersion
dockereq17.3.2 8
dockereq17.3.2 7
dockereq17.6.2 1
dockereq17.6.2 2
dockereq17.6.2 3
dockereq17.6.2 4
dockereq17.6.2 5
dockereq17.6.2 6
dockereq17.6.2 7
dockereq17.6.2 8

Name	Operator	Version
docker	eq	17.3.2 8
docker	eq	17.3.2 7
docker	eq	17.6.2 1
docker	eq	17.6.2 2
docker	eq	17.6.2 3
docker	eq	17.6.2 4
docker	eq	17.6.2 5
docker	eq	17.6.2 6
docker	eq	17.6.2 7
docker	eq	17.6.2 8