CVE-2026-34040-PoC

CVE-2026-34040 — Bypass do Plugin AuthZ do Docker/Moby Lab PoC KO: Projeto de reprodução prática de uma vulnerabilidade que contorna o plugin de autorização AuthZ do Docker Moby usando um corpo de requisição superior a 1MB. PT: Uma reprodução laboratorial de uma vulnerabilidade que contorna os...

CVE-2024-41110-SCAN

CVE-2024-41110 Verificatore di sicurezza di Docker Questo strumento è progettato per verificare un host per la vulnerabilità relativa al CVE-2024-41110 nelle installazioni di Docker. Cerca specificamente versioni vulnerabili ​​di Docker e l'uso di plugin AuthZ, che possono potenzialmente portare ...

cve-2024-41110-checker

CVE-2024-41110 Docker Security Checker Questo strumento è progettato per verificare la presenza di vulnerabilità relative a CVE-2024-41110 nelle installazioni Docker su più host. Controlla specificamente le versioni vulnerabili di Docker e l'uso di plugin AuthZ, che possono potenzialmente portare...

Security Bulletin: IBM Instana Observability is vulnerable to AuthZ Plugin Bypass and Privilege Escalation

Summary Vulnerability in Docker Engine that could allow attackers to bypass authorization plugins AuthZ was remediated in IBM Observability with Instana Build 279. CVE-2024-41110 Vulnerability Details CVEID:CVE-2024-41110 DESCRIPTION: Moby is an open-source project created by Docker for software...

ROS-20241121-04

Vulnerability of authorization plugins AuthZ of the software for automating deployment and management of applications in containerized environments Docker Engine is related to flaws in the AuthZ plugin. application management in containerization-enabled environments Docker Engine is related to...

ROS-20240729-21

Vulnerability of authorization plugins AuthZ of the software for automating deployment and management of applications in containerized environments Docker Engine is related to flaws in the AuthZ plugin. application management in containerization-enabled environments Docker Engine is associated wi...

Docker AuthZ Plugin Bypass Vulnerability (GHSA-v23v-6jw2-98fq)

Docker is prone to an AuthZ plugin bypass vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:docker:docker";...

Vulnerabilities fixed in Docker Moby

A vulnerability has been fixed in Docker Moby. The vulnerability allows a malicious party to increase privileges via an API request by bypassing a security measure. This vulnerability is only exploitable when using an AuthZ plugin to manage access rights. The Docker team has released an update to...