CVE-2025-4095

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...

CVE-2025-4095

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13887 2025-04-29 19:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ijzcwz2n 2025-04-29 21:01:04+00:00| seen| https://t.me/cvedetector/24033 2025-05-06...

CVE-2025-4095

CVE-2025-4095 describes an access control weakness in Docker Desktop for Mac where Registry Access Management (RAM) policies are not applied when a macOS configuration profile enforces organization sign-in. The result is that Docker Desktop users could pull images from any registry, including una...

CVE-2025-4095 Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...

CVE-2025-4095 Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...