Information Disclosure

🗓️ 05 Oct 2021 02:51:51Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 32 Views

github.com/docker/cli vulnerability information disclosure due to misconfigured configuratio

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: A vulnerability in Docker CLI affects IBM Cloud Pak System (CVE-2021-41092)	6 May 202218:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Docker, Python, and NGINX affect IBM Spectrum Protect Plus	10 Dec 202118:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to Using Components with Known Vulnerabilities	25 Jul 202213:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to Docker CLI (CVE-2021-41092) and Apache Log4j (CVE-2021-4104, CVE-2022-23302, CVE-2022-23305, CVE-2022-23307) weaknesses	18 Aug 202221:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:29	–	ibm
Tenable Nessus	Amazon Linux 2 : docker (ALAS-2022-017) (deprecated)	8 Mar 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASDOCKER-2022-017)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASECS-2023-028)	17 Nov 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2022-017)	11 May 202200:00	–	nessus

Vulners

Node

docker dockerMatch19.03.10-r0go

AND

docker dockerMatch20.10.6-r1go

AND

docker dockerMatch19.03.8-r1go

AND

docker dockerMatch19.03.6-r2go

AND

docker dockerMatch19.03.7-r0go

AND

docker dockerMatch20.10.8-r0go

AND

docker dockerMatch20.10.8-r1go

AND

docker dockerMatch20.10.6-r0go

AND

docker dockerMatch20.10.5-r1go

AND

docker dockerMatch20.10.7-r1go

AND

docker dockerMatch20.10.4-r0go

AND

docker dockerMatch19.03.8-r0go

AND

docker dockerMatch20.10.5-r2go

AND

docker dockerMatch20.10.5-r0go

AND

alpinelinux alpine_linuxMatchedge

docker dockerMatch20.10.7-r2go

AND

docker dockerMatch20.10.7-r1go

AND

docker dockerMatch20.10.6-r1go

AND

alpinelinux alpine_linuxMatch3.14

docker.io docker.ioMatch19.03.13+dfsg3-1debian

AND

docker.io docker.ioMatch20.10.4+dfsg1-1debian

AND

debian debian_linuxMatch999

devel develMatch19.03.11-0ubuntu3debian

AND

devel develMatch19.03.11-0ubuntu2debian

AND

devel develMatch20.10.2-0ubuntu2debian

AND

devel develMatch19.03.13-0ubuntu3debian

AND

debian debian_linux

google bionicMatch17.12.1-0ubuntu1debian

AND

google bionicMatch19.03.6-0ubuntu1~18.04.1debian

AND

google bionicMatch18.09.7-0ubuntu1~18.04.4debian

AND

google bionicMatch19.03.6-0ubuntu1~18.04.2debian

AND

google bionicMatch20.10.7-0ubuntu1~18.04.1debian

AND

debian debian_linux

hirsute hirsuteMatch19.03.13-0ubuntu3debian

AND

debian debian_linux

focal focalMatch19.03.8-0ubuntu1.20.04debian

AND

focal focalMatch19.03.8-0ubuntu1.20.04.1debian

AND

focal focalMatch19.03.8-0ubuntu1debian

AND

debian debian_linux

docker.io docker.ioMatch19.03.13+dfsg1-3debian

AND

docker.io docker.ioMatch20.10.5+dfsg1-1+b5debian

AND

docker.io docker.ioMatch20.10.3+dfsg1-2debian

AND

debian debian_linuxMatch11

docker github.com/docker/cliRangev18.06.0-ce-rc1–v20.10.7go

Source	Link
github	www.github.com/docker/cli/commit/893e52cf4ba4b048d72e99748e0f86b2767c6c6b
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/
github	www.github.com/docker/cli/security/advisories/GHSA-99pg-grm5-qq3v
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf

07 Nov 2023 22:37Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.15.4 - 7.5

CVSS 25

EPSS0.00077