Information Disclosure

🗓️ 12 Sep 2022 11:25:08Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 59 Views

Vulnerability in `getUser` function of `oci_linux.go` allows information disclosure

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202316:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Docker affect IBM InfoSphere Information Server	14 Oct 202221:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vunerability in docker engine affect pattern Type shipped with Cloud Pak System (CVE-2022-36109)	4 Dec 202315:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Files or Directories Accessible to External Parties in Grafana (CVE-2021-41089, CVE-2022-24769, CVE-2021-41091, CVE-2018-20699, CVE-2022-36109)	5 Aug 202419:51	–	ibm
Tenable Nessus	Amazon Linux 2022 : containerd, containerd-stress (ALAS2022-2022-156)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : containerd, containerd-stress (ALAS2022-2022-210)	25 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2023-079)	21 Mar 202300:00	–	nessus

Vulners

Node

docker dockerMatch19.03.7-r0go

AND

docker dockerMatch19.03.10-r0go

AND

docker dockerMatch19.03.8-r1go

AND

docker dockerMatch20.10.6-r1go

AND

docker dockerMatch20.10.11-r0go

AND

docker dockerMatch19.03.6-r2go

AND

docker dockerMatch19.03.8-r0go

AND

docker dockerMatch20.10.13-r1go

AND

docker dockerMatch20.10.16-r0go

AND

docker dockerMatch20.10.15-r0go

AND

docker dockerMatch20.10.12-r0go

AND

docker dockerMatch20.10.10-r0go

AND

docker dockerMatch20.10.15-r1go

AND

docker dockerMatch20.10.8-r0go

AND

docker dockerMatch20.10.9-r0go

AND

docker dockerMatch20.10.14-r1go

AND

docker dockerMatch20.10.12-r1go

AND

docker dockerMatch20.10.5-r1go

AND

docker dockerMatch20.10.14-r0go

AND

docker dockerMatch20.10.7-r1go

AND

docker dockerMatch20.10.6-r0go

AND

docker dockerMatch20.10.17-r2go

AND

docker dockerMatch20.10.13-r0go

AND

docker dockerMatch20.10.8-r1go

AND

docker dockerMatch20.10.17-r0go

AND

docker dockerMatch20.10.5-r2go

AND

docker dockerMatch20.10.5-r0go

AND

docker dockerMatch20.10.17-r3go

AND

docker dockerMatch20.10.17-r1go

AND

docker dockerMatch20.10.4-r0go

AND

alpinelinux alpine_linuxMatchedge

docker dockerMatch20.10.16-r1go

AND

docker dockerMatch20.10.15-r1go

AND

docker dockerMatch20.10.15-r0go

AND

docker dockerMatch20.10.16-r2go

AND

docker dockerMatch20.10.14-r1go

AND

docker dockerMatch20.10.16-r0go

AND

alpinelinux alpine_linuxMatch3.16

docker.io docker.ioMatch20.10.4+dfsg1-1debian

AND

docker.io docker.ioMatch19.03.13+dfsg3-1debian

AND

debian debian_linuxMatch999

mobyproject github.com/moby/mobyRangev1.11.0-rc1–1.11.0-rc1go

Source	Link
bugs	www.bugs.gentoo.org/show_bug.cgi
github	www.github.com/moby/moby/commit/de7af816e76a7fd3fbf06bffa6832959289fba32
github	www.github.com/moby/moby/releases/tag/v20.10.18
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/O7JL2QA3RB732MLJ3RMUXB3IB7AA22YU/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7JL2QA3RB732MLJ3RMUXB3IB7AA22YU/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/RQQ4E3JBXVR3VK5FIZVJ3QS2TAOOXXTQ/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQQ4E3JBXVR3VK5FIZVJ3QS2TAOOXXTQ/
github	www.github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4
bugs	www.bugs.gentoo.org/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/O7JL2QA3RB732MLJ3RMUXB3IB7AA22YU

17 Jan 2025 15:20Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3 - 6.3

EPSS0.0076