Authorization Bypass

🗓️ 06 Apr 2023 19:31:36Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 35 Views

Docker vulnerability, Authorization bypass via encrypted overlay networks

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 May 202410:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2024.	8 Aug 202417:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Multiple Vulnerabilities in Docker affect Cloud Pak System [CVE-2023-28840, CVE-2023-28841, CVE-2023-28842]	25 Dec 202310:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities	26 Mar 202503:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
AlpineLinux	CVE-2023-28842	4 Apr 202321:07	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в docker.io	20 May 202605:53	–	astralinux
Chainguard	CVE-2023-28842 vulnerabilities	4 Apr 202322:15	–	cgr

Vulners

Node

docker dockerMatch20.10.21-r1os

AND

docker dockerMatch20.10.21-r2os

AND

docker dockerMatch20.10.21-r3os

AND

docker dockerMatch20.10.21-r0os

AND

alpinelinux alpine_linuxMatch3.17

docker dockerMatch20.10.19-r0os

AND

docker dockerMatch20.10.15-r1os

AND

docker dockerMatch20.10.10-r0os

AND

docker dockerMatch19.03.8-r1os

AND

docker dockerMatch19.03.7-r0os

AND

docker dockerMatch23.0.0-r0os

AND

docker dockerMatch19.03.10-r0os

AND

docker dockerMatch23.0.1-r1os

AND

docker dockerMatch20.10.16-r0os

AND

docker dockerMatch20.10.14-r0os

AND

docker dockerMatch20.10.13-r1os

AND

docker dockerMatch20.10.8-r1os

AND

docker dockerMatch19.03.6-r2os

AND

docker dockerMatch20.10.23-r0os

AND

docker dockerMatch20.10.17-r0os

AND

docker dockerMatch19.03.8-r0os

AND

docker dockerMatch20.10.7-r1os

AND

docker dockerMatch23.0.2-r0os

AND

docker dockerMatch20.10.17-r3os

AND

docker dockerMatch20.10.5-r1os

AND

docker dockerMatch20.10.14-r1os

AND

docker dockerMatch20.10.18-r0os

AND

docker dockerMatch20.10.15-r0os

AND

docker dockerMatch20.10.20-r0os

AND

docker dockerMatch20.10.22-r0os

AND

docker dockerMatch20.10.11-r0os

AND

docker dockerMatch20.10.4-r0os

AND

docker dockerMatch20.10.21-r2os

AND

docker dockerMatch20.10.13-r0os

AND

docker dockerMatch20.10.5-r0os

AND

docker dockerMatch20.10.6-r0os

AND

docker dockerMatch20.10.17-r1os

AND

docker dockerMatch20.10.12-r1os

AND

docker dockerMatch20.10.9-r0os

AND

docker dockerMatch20.10.6-r1os

AND

docker dockerMatch20.10.21-r0os

AND

docker dockerMatch20.10.17-r2os

AND

docker dockerMatch20.10.12-r0os

AND

docker dockerMatch20.10.18-r1os

AND

docker dockerMatch20.10.21-r1os

AND

docker dockerMatch23.0.0-r1os

AND

docker dockerMatch20.10.5-r2os

AND

docker dockerMatch20.10.8-r0os

AND

alpinelinux alpine_linuxMatchedge

docker.io docker.ioMatch19.03.13+dfsg3-1debian

AND

docker.io docker.ioMatch20.10.4+dfsg1-1debian

AND

debian debian_linuxMatch999

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.17/community.yaml
github	www.github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333
github	www.github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp
github	www.github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237
github	www.github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p
github	www.github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/

19 Sep 2023 05:34Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.8

EPSS0.00863

SSVC