PT-2023-13549 · Docker · Docker

Publicado 2023-01-31 · Atualizado 2023-05-02 · CVE-2022-37708

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Docker version 20.10.15

Description The issue allows unauthorized users outside the Docker container to access any files within the Docker container due to insecure permissions.

Recommendations For Docker version 20.10.15, consider restricting access to the container's files until a patch is available. As a temporary workaround, review and adjust the permissions of the files within the Docker container to minimize the risk of unauthorized access.

Exploit

Correção

Identificadores relacionados

CVE-2022-37708

Produtos afetados

Docker

Referências · 8

• 🔥 https://github.com/thekevinday/docker_lightman_exploit · Exploit
• ❌ https://github.com/orgs/docker/repositories · Nota, Deleted
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-37708 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-37708 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2022-37708 · Nota de Segurança
• https://t.me/cibsecurity/57232 · Publicação no Telegram
• https://docker.com · Nota
• https://ubuntu.com/security/CVE-2022-37708 · Aviso do Fabricante