In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 22, 2024 | Jul 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfo | Jul 4, 2022 | Jul 18, 2019 |
| Amazon_linux | — | Upgrade docker | Nov 7, 2019 | Jul 18, 2019 |
| Debian | — | Upgrade docker.io | Oct 24, 2019 | Jul 18, 2019 |
| Docker_ce | — | Upgrade Docker CE to version 18.09.8 or later | Nov 25, 2019 | Jul 18, 2019 |
| Docker_ee | — | Upgrade Docker EE to version 18.03.2Upgrade Docker EE to version 18.09.8Upgrade Docker EE to version 17.06.3 | Nov 25, 2019 | Jul 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Mar 23, 2020 | Jul 18, 2019 |
| Oracle_linux | — | Upgrade docker-engine | Oct 4, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 18, 2019 |
| Suse | — | Upgrade docker-runcUpgrade docker-testUpgrade docker-libnetworkUpgrade containerdUpgrade docker-zsh-completionUpgrade dockerUpgrade golang-github-docker-libnetworkUpgrade docker-fish-completionUpgrade containerd-ctrUpgrade docker-bash-completion | Aug 30, 2019 | Jul 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub