PT-2016-7712 · Cisco+1 · Cisco Cloudcenter Orchestrator+1

Publicado 2016-12-26 · Atualizado 2017-01-03 · CVE-2016-9223

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco CloudCenter Orchestrator (CCO) (affected versions not specified)

Description A vulnerability in the Docker Engine configuration could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. This issue affects systems where the Docker Engine TCP port 2375 is open and bound to the local address 0.0.0.0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-9223

Produtos afetados

Cisco Cloudcenter Orchestrator

Docker Engine

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-9223 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9223 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-cco · Aviso do Fabricante
• http://securityfocus.com/bid/95024 · Nota