[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

252097

 
 

909

 
 

196747

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Path traversal vulnerability in Docker - CVE-2021-21284

ID: oval:org.secpod.oval:def:73525Date: (C)2021-06-29   (M)2023-11-24
Class: VULNERABILITYFamily: windows




The host is installed with Docker before 19.03.15 or 20.x before 20.10.3 and is prone to a path traversal vulnerability. A flaw is present in the application, which fails to handle an issue in --userns-remap option. Successful exploitation could allow attackers to perform privilege escalation to real root via remapped root.

Platform:
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2008 R2
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Product:
Docker CE
Docker EE
Reference:
CVE-2021-21284
CVE    1
CVE-2021-21284

© SecPod Technologies