6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
7.1 High
AI Score
Confidence
High
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0005 Low
EPSS
Percentile
15.1%
Lei Wang and Ruizhi Xiao discovered that the Moby Docker engine in
Docker incorrectly allowed the docker cp command to make permissions
changes in the host filesystem in some situations. A local attacker
could possibly use to this to expose sensitive information or gain
administrative privileges.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 21.04 | noarch | docker.io | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
Ubuntu | 21.04 | noarch | docker-doc | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
Ubuntu | 21.04 | noarch | golang-docker-dev | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
Ubuntu | 21.04 | noarch | golang-github-docker-docker-dev | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
Ubuntu | 21.04 | noarch | vim-syntax-docker | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
Ubuntu | 20.04 | noarch | docker.io | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
Ubuntu | 20.04 | noarch | docker-doc | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
Ubuntu | 20.04 | noarch | golang-docker-dev | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
Ubuntu | 20.04 | noarch | golang-github-docker-docker-dev | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
Ubuntu | 20.04 | noarch | vim-syntax-docker | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
7.1 High
AI Score
Confidence
High
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0005 Low
EPSS
Percentile
15.1%