CVE-2026-34040-PoC

CVE-2026-34040 — Docker/Moby AuthZ Plugin Bypass Lab PoC KO: DockerMoby의 인가AuthZ 플러그인을 1MB를 초과하는 요청 본문 으로 우회하는 취약점의 실습용 재현 프로젝트입니다. EN: A lab reproduction of a vulnerability that bypasses Docker Moby authorization AuthZ plugins using an oversized 1MB request body. Vulnerability facts / 취약점 사실 Ite...

CVE-2024-41110-SCAN

CVE-2024-41110 Dockerセキュリティチェッカー このツールは、DockerインストールにおけるCVE-2024-41110に関連する脆弱性をホスト上で確認するために設計されました。 このツールは特に、脆弱なDockerバージョンとAuthZプラグインの使用をスキャンし、セキュリティ問題につながる可能性があります。 Usage 以下のコマンドでスクリプトを実行します: root@kitploit: python3 scan-CVE-2024-41110.py Note Vladimir Poglazov氏のプロジェクトの要約版 - GitHub...

cve-2024-41110-checker

CVE-2024-41110 Docker 安全检查工具 此工具旨在检查多台主机的 Docker 安装中与 CVE-2024-41110 相关的漏洞。它专门检测易受攻击的 Docker 版本以及 AuthZ 插件的使用情况，这些可能导致安全问题。 功能 并行检查多台主机，实现高效扫描 检测易受攻击的 Docker 版本 识别 AuthZ 插件的使用 生成全面的摘要报告 为受影响的主机提供修复计划 支持基于密码和基于密钥的 SSH 认证 要求 Python 3.6 或更高版本 Fabric 库 pip install fabric 安装 1. 克隆此仓库： root@kitploit: g...

Security Bulletin: IBM Instana Observability is vulnerable to AuthZ Plugin Bypass and Privilege Escalation

Summary Vulnerability in Docker Engine that could allow attackers to bypass authorization plugins AuthZ was remediated in IBM Observability with Instana Build 279. CVE-2024-41110 Vulnerability Details CVEID:CVE-2024-41110 DESCRIPTION: Moby is an open-source project created by Docker for software...

ROS-20241121-04

Vulnerability of authorization plugins AuthZ of the software for automating deployment and management of applications in containerized environments Docker Engine is related to flaws in the AuthZ plugin. application management in containerization-enabled environments Docker Engine is related to...

ROS-20240729-21

Vulnerability of authorization plugins AuthZ of the software for automating deployment and management of applications in containerized environments Docker Engine is related to flaws in the AuthZ plugin. application management in containerization-enabled environments Docker Engine is associated wi...

Docker AuthZ Plugin Bypass Vulnerability (GHSA-v23v-6jw2-98fq)

Docker is prone to an AuthZ plugin bypass vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:docker:docker";...

Vulnerabilities fixed in Docker Moby

A vulnerability has been fixed in Docker Moby. The vulnerability allows a malicious party to increase privileges via an API request by bypassing a security measure. This vulnerability is only exploitable when using an AuthZ plugin to manage access rights. The Docker team has released an update to...