Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.
References
Configurations
History
07 Nov 2023, 02:25
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2015-05-18 15:59
Updated : 2024-02-28 15:21
NVD link : CVE-2015-3630
Mitre link : CVE-2015-3630
CVE.ORG link : CVE-2015-3630
JSON object : View
Products Affected
docker
- docker
CWE
CWE-264
Permissions, Privileges, and Access Controls