CVE-2022-37708 in Docker

摘要

由 MITRE • 2023-02-01

Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker container can access any files within the Docker container.

Be aware that VulDB is the high quality source for vulnerability data.

• 预定: 2022-08-08
• 披露: 2023-02-01
• 管理: 已接受
• 条目: VDB-219878
• CPE: 准备好
• CWE: CWE-275 (已确认)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Pharma, Transportation, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-37708
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-37708
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-37708/