GO-2024-2500 Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

🗓️ 28 Jun 2024 15:28:53Reported by GoogleType

osv🔗 osv.dev👁 22 Views

Moby (Docker Engine) data directory permissions issu

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Docker affect IBM InfoSphere Information Server	14 Oct 202221:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Files or Directories Accessible to External Parties in Grafana (CVE-2021-41089, CVE-2022-24769, CVE-2021-41091, CVE-2018-20699, CVE-2022-36109)	5 Aug 202419:51	–	ibm
GithubExploit	Exploit for Incorrect Permission Assignment for Critical Resource in Mobyproject Moby	2 May 202307:25	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Docker	14 Feb 202604:10	–	githubexploit
GithubExploit	Exploit for Incorrect Permission Assignment for Critical Resource in Mobyproject Moby	30 Jun 202410:57	–	githubexploit
Tenable Nessus	Amazon Linux 2 : docker (ALAS-2022-017) (deprecated)	8 Mar 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASDOCKER-2022-017)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASECS-2023-028)	17 Nov 202300:00	–	nessus