Improper Access Control

🗓️ 08 Aug 2025 18:25:56Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

Improper access control: firewalld rules not recreated after reload, exposed localhost ports.

Reporter	Title	Published	Views	Family All 111
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	17 Mar 202603:46	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	16 Jan 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: Firewalld Reload Bypasses Localhost Port Restrictions in Moby (Docker Engine) Prior to 28.3.3, affects watsonx.data	6 Jan 202606:00	–	ibm
AlpineLinux	CVE-2025-54388	30 Jul 202513:24	–	alpinelinux
BDU FSTEC	The vulnerability of the Firewall software for creating containerized systems like Moby allows a intruder to gain unauthorized access to protected information.	5 Aug 202500:00	–	bdu_fstec
Chainguard	CVE-2025-54388 vulnerabilities	30 Jul 202513:17	–	cgr
Circl	CVE-2025-54388	21 Aug 202513:58	–	circl
CNNVD	Moby 安全漏洞	30 Jul 202500:00	–	cnnvd
CVE	CVE-2025-54388	30 Jul 202513:24	–	cve

Vulners

Node

AND

docker dockerMatch28.2.1-r0go

docker dockerMatch28.3.0-r0go

docker dockerMatch28.2.2-r0go

docker dockerMatch28.1.1-r2go

alpinelinux alpine_linuxMatch3.22

AND

docker dockerMatch20.10.8-r1go

docker dockerMatch27.1.1-r0go

docker dockerMatch26.1.4-r1go

docker dockerMatch20.10.14-r1go

docker dockerMatch20.10.21-r1go

docker dockerMatch24.0.5-r0go

docker dockerMatch27.0.2-r0go

docker dockerMatch25.0.4-r1go

docker dockerMatch20.10.8-r0go

docker dockerMatch24.0.6-r3go

docker dockerMatch19.03.8-r0go

docker dockerMatch27.0.3-r1go

docker dockerMatch28.3.1-r1go

docker dockerMatch20.10.22-r0go

docker dockerMatch20.10.6-r0go

docker dockerMatch24.0.2-r2go

docker dockerMatch26.1.2-r1go

docker dockerMatch20.10.17-r2go

docker dockerMatch23.0.2-r0go

docker dockerMatch20.10.15-r1go

docker dockerMatch20.10.15-r0go

docker dockerMatch24.0.6-r4go

docker dockerMatch26.0.2-r0go

docker dockerMatch24.0.4-r2go

docker dockerMatch27.4.0-r0go

docker dockerMatch24.0.2-r0go

docker dockerMatch28.2.2-r0go

docker dockerMatch24.0.5-r1go

docker dockerMatch20.10.23-r0go

docker dockerMatch27.5.1-r0go

docker dockerMatch20.10.17-r1go

docker dockerMatch28.3.2-r0go

docker dockerMatch20.10.13-r0go

docker dockerMatch23.0.6-r3go

docker dockerMatch24.0.6-r1go

docker dockerMatch28.3.1-r0go

docker dockerMatch19.03.10-r0go

docker dockerMatch28.0.4-r1go

docker dockerMatch28.0.4-r0go

docker dockerMatch20.10.5-r2go

docker dockerMatch23.0.0-r0go

docker dockerMatch20.10.14-r0go

docker dockerMatch19.03.6-r2go

docker dockerMatch27.1.2-r0go

docker dockerMatch23.0.6-r1go

docker dockerMatch27.4.1-r0go

docker dockerMatch20.10.13-r1go

docker dockerMatch23.0.3-r2go

docker dockerMatch23.0.0-r1go

docker dockerMatch28.0.1-r0go

docker dockerMatch28.2.1-r0go

docker dockerMatch20.10.9-r0go

docker dockerMatch20.10.4-r0go

docker dockerMatch27.0.3-r0go

docker dockerMatch23.0.5-r2go

docker dockerMatch25.0.2-r0go

docker dockerMatch27.3.1-r0go

docker dockerMatch28.0.1-r1go

docker dockerMatch28.1.1-r2go

docker dockerMatch27.2.0-r0go

docker dockerMatch20.10.20-r0go

docker dockerMatch23.0.1-r1go

docker dockerMatch20.10.10-r0go

docker dockerMatch25.0.3-r0go

docker dockerMatch20.10.19-r0go

docker dockerMatch27.1.0-r0go

docker dockerMatch27.2.1-r0go

docker dockerMatch24.0.7-r0go

docker dockerMatch20.10.21-r0go

docker dockerMatch20.10.21-r2go

docker dockerMatch20.10.5-r1go

docker dockerMatch23.0.3-r1go

docker dockerMatch20.10.5-r0go

docker dockerMatch26.1.1-r1go

docker dockerMatch23.0.4-r1go

docker dockerMatch24.0.1-r0go

docker dockerMatch19.03.8-r1go

docker dockerMatch23.0.5-r0go

docker dockerMatch27.5.1-r1go

docker dockerMatch20.10.12-r1go

docker dockerMatch20.10.16-r0go

docker dockerMatch28.3.0-r0go

docker dockerMatch20.10.6-r1go

docker dockerMatch28.0.2-r0go

docker dockerMatch24.0.6-r2go

docker dockerMatch27.5.0-r0go

docker dockerMatch20.10.17-r3go

docker dockerMatch20.10.12-r0go

docker dockerMatch26.1.4-r0go

docker dockerMatch26.0.0-r1go

docker dockerMatch20.10.11-r0go

docker dockerMatch20.10.18-r0go

docker dockerMatch26.0.1-r0go

docker dockerMatch26.0.0-r0go

docker dockerMatch28.1.1-r1go

docker dockerMatch20.10.18-r1go

docker dockerMatch27.3.0-r0go

docker dockerMatch20.10.7-r1go

docker dockerMatch26.1.3-r0go

docker dockerMatch19.03.7-r0go

docker dockerMatch20.10.17-r0go

alpinelinux alpine_linuxMatchedge

mobyproject github.com/moby/mobyRangev28.2.0-rc.1–v28.3.2go

docker github.com/docker/dockerRangev28.2.0-rc.1–v28.3.2go

docker github.com/docker/dockerRange28.2.0–v28.3.2go

Source	Link
github	www.github.com/moby/moby/commit/bea959c7b793b32a893820b97c4eadc7c87fabb0
github	www.github.com/moby/moby/pull/50506
github	www.github.com/advisories/GHSA-x4rx-4gw3-53p4
github	www.github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4

18 Jul 2026 12:14Current

7High risk

Vulners AI Score7

CVSS 3.14.6

CVSS 45.1

EPSS0.00215

SSVC