boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker daemons enabling TCP connections without TLS authentication.
References
Link | Resource |
---|---|
https://groups.google.com/forum/#!msg/docker-announce/aQoVmQlcE0A/smPuBNYf8VwJ | Third Party Advisory |
Configurations
Information
Published : 2018-02-06 08:29
Updated : 2020-01-30 10:05
NVD link : CVE-2014-5280
Mitre link : CVE-2014-5280
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
boot2docker
- boot2docker