GitHub Advisoryadvisory · Go

GHSA-44gg-pmqr-4669 Access Restriction Bypass in Docker

MEDIUM Published 2022-02-15 Modified 2021-05-20 Official page ↗
Aliases
CVE-2014-6408
Ecosystem
Go
Packages
github.com/docker/docker
Severity
Moderate
Weaknesses
CWE-285
Reviewed
2021-05-20

Affected packages

• Go github.com/docker/docker: >= 1.3.0, < 1.3.2 → fixed in 1.3.2

Description

Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

Related

Alias · CVE (1)

  • CVE-2014-6408 Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container… vulnerability

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References