Docker 路径遍历漏洞

🗓️ 02 Feb 2021 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Docker path traversal flaw before versions 9.03.15 and 20.10.3 grants root in the mapped namespace access to the host filesystem.

Reporter	Title	Published	Views	Family All 126
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Docker affects IBM InfoSphere Information Server	1 Apr 202121:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Docker affect IBM Cloud Pak System	19 Jul 202112:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Automation Manager Content Runtime is affected by an issue with Docker before 19.03.15.	22 Apr 202114:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Docker vulnerabilities (CVE-2021-21285, CVE-2021-21284)	3 Sep 202112:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by vulnerabilities in Docker (CVE-2021-21285, CVE-2021-21284)	9 Mar 202113:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Node.js, Docker, and XStream affect IBM Spectrum Protect Plus	28 Jun 202120:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Managed Service Content Runtime is affected by an issue with Docker before 19.03.15.	22 Apr 202114:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm

Source	Link
github	www.github.com/moby/moby/releases/tag/v19.03.15
docs	www.docs.docker.com/engine/release-notes/
security	www.security.gentoo.org/glsa/202107-23
github	www.github.com/moby/moby/releases/tag/v20.10.3
debian	www.debian.org/security/2021/dsa-4865
github	www.github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc
security	www.security.netapp.com/advisory/ntap-20210226-0005/
github	www.github.com/moby/moby/commit/64bd4485b3a66a597c02c95f5776395e540b2c7c
ibm	www.ibm.com/support/pages/node/6455281
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021111511

26 May 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 22.7

CVSS 3.16.8

EPSS0.0002

docker path traversal mapped namespace root host filesystem version 9.03.15 version 20.10.3