Access Restriction Bypass in Docker
Date: 2022-02
Affected: go/github.com/docker/docker
Attack vector: auth-bypass
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2014-6408
CWE: CWE-285

Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.


Mitigations:

Architectural layers (MAESTRO):