CVE-2021-44719

Docker Desktop 4.3.0 has Incorrect Access Control...

CVE-2021-44719

Docker Desktop 4.3.0 has Incorrect Access Control...

Improper access control

Docker Desktop 4.3.0 has Incorrect Access Control...

CVE-2021-44719

Summary: CVE-2021-44719 affects Docker Desktop 4.3.0 with an Incorrect Access Control issue. The vulnerability is described as a local-privilege/host-access problem where a container could access restricted host files, bypassing the allowed sharing rules (per Nessus NASL description for Mac, and ...

CVE-2021-44719

Docker Desktop 4.3.0 has Incorrect Access Control...

CVE-2021-44719: Undefined Security Weakness

Docker Desktop 4.3.0 has Incorrect Access Control...

Docker Desktop security vulnerabilities

Docker Desktop is a container-based desktop software for lightweight deployment of applications from Docker, Inc. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on Linux/Windows/Mac OS systems, as we...

PT-2022-12210 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop version 4.3.0 Description: The issue is related to Incorrect Access Control in Docker Desktop. Recommendations: For Docker Desktop version 4.3.0, update to a newer version that contains a fix for this issue...

Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2022-1762)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

com.nirima:docker-plugin (>=0.3.4, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.557) +9 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.557)

org.jenkins-ci.main:jenkins-core MAVEN version 1.557 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.3.4, =1.8.3, =1.2, =1.0, =0.4.5, =0.4.6 Source cves: CVE-2019-10406...

com.nirima:docker-plugin (>=0.9-beta1, <=0.13.0), com.nirima:docker-plugin-parent (>=0.9-beta1, <=0.13.0) +26 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.565.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.9-beta1, =0.9-beta1, =2.13.0-beta-2, =1.0, =1.0, =1.0, =0.1.0,...

com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.638)

org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.2), com.nirima.jenkins.repository:pom (1.2) +7 more potentially affected by CVE-2019-10402 via org.jenkins-ci.main:jenkins-core (1.546)

org.jenkins-ci.main:jenkins-core MAVEN version 1.546 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.2 - com.nirima.jenkins.repository:pom 1.2 ...

com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (1.638)

org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...

org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (1.555)

org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...

com.nirima:docker-plugin (>=0.3.4, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.557) +9 more potentially affected by CVE-2019-10403 via org.jenkins-ci.main:jenkins-core (1.557)

org.jenkins-ci.main:jenkins-core MAVEN version 1.557 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.3.4, =1.8.3, =1.2, =1.0, =0.4.5, =0.4.6 Source cves: CVE-2019-10403...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2019-10404 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

Server-Side Request Forgery in charm

We've discovered a vulnerability in which attackers could forge HTTP requests to manipulate the charm data directory to access or delete anything on the server. This has been patched in https://github.com/charmbracelet/charm/commit/3c90668f955c7ce5ef721e4fc9faee7053232fd3 and is available in...

com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2021-21686 via org.jenkins-ci.main:jenkins-core (1.638)

org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...