PT-2023-13549 · Docker · Docker

Published 2023-01-31 · Updated 2023-05-02 · CVE-2022-37708

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Docker version 20.10.15

Description The issue allows unauthorized users outside the Docker container to access any files within the Docker container due to insecure permissions.

Recommendations For Docker version 20.10.15, consider restricting access to the container's files until a patch is available. As a temporary workaround, review and adjust the permissions of the files within the Docker container to minimize the risk of unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2022-37708

Affected Products

Docker

References · 8

• 🔥 https://github.com/thekevinday/docker_lightman_exploit · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-37708 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37708 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-37708 · Security Note
• https://ubuntu.com/security/CVE-2022-37708 · Vendor Advisory
• ❌ https://github.com/orgs/docker/repositories · Note, Deleted
• https://t.me/cibsecurity/57232 · Telegram Post
• https://docker.com · Note