vulnerability
Docker: CVE-2014-5282: tagging image to ID can redirect images on subsequent pulls
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:S/C:P/I:P/A:N) | 2018-02-06 | 2018-04-27 | 2018-05-03 |
Severity
6
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:N)
Published
2018-02-06
Added
2018-04-27
Modified
2018-05-03
Description
Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'.
Solution
docker-cve-2014-5282-1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.