Поиск уязвимостей
Количество 17
Количество 17
GHSA-99pg-grm5-qq3v
Docker CLI leaks private registry credentials to registry-1.docker.io
CVE-2021-41092
Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.
CVE-2021-41092
Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.
CVE-2021-41092
Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.
CVE-2021-41092
Docker CLI is the command line interface for the docker container runt ...
BDU:2022-05502
Уязвимость интерфейса командной строки (CLI) средства автоматизации развёртывания и управления приложениями в средах с поддержкой контейнеризации Docker, позволяющая нарушителю получить произвольные учетные данные
ALT-PU-2021-4841
ALT-PU-2021-4841: package `docker-cli` update to version 20.10.9-alt1
ALT-PU-2021-4839
ALT-PU-2021-4839: package `docker-cli` update to version 20.10.11-alt2
openSUSE-SU-2022:0334-1
Security update for containerd, docker
SUSE-SU-2022:0334-1
Security update for containerd, docker
SUSE-SU-2022:0213-1
Security update for containerd, docker
openSUSE-SU-2021:3506-1
Security update for containerd, docker, runc
openSUSE-SU-2021:1404-1
Security update for containerd, docker, runc
SUSE-SU-2021:3506-1
Security update for containerd, docker, runc
SUSE-SU-2021:3336-1
Security update for containerd, docker, runc
SUSE-SU-2025:03545-1
Security update for docker-stable
SUSE-SU-2025:03540-1
Security update for docker-stable
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-99pg-grm5-qq3v Docker CLI leaks private registry credentials to registry-1.docker.io | CVSS3: 5.4 | 2% Низкий | больше 2 лет назад |
 | CVE-2021-41092 Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH. | CVSS3: 7.5 | 2% Низкий | около 5 лет назад |
 | CVE-2021-41092 Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH. | CVSS3: 7.5 | 2% Низкий | около 5 лет назад |
 | CVE-2021-41092 Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH. | CVSS3: 7.5 | 2% Низкий | около 5 лет назад |
| CVE-2021-41092 Docker CLI is the command line interface for the docker container runt ... | CVSS3: 7.5 | 2% Низкий | около 5 лет назад |
 | BDU:2022-05502 Уязвимость интерфейса командной строки (CLI) средства автоматизации развёртывания и управления приложениями в средах с поддержкой контейнеризации Docker, позволяющая нарушителю получить произвольные учетные данные | CVSS3: 7.5 | 2% Низкий | около 5 лет назад |
| ALT-PU-2021-4841 ALT-PU-2021-4841: package `docker-cli` update to version 20.10.9-alt1 | CVSS3: 7.5 | 2% Низкий | больше 2 лет назад |
| ALT-PU-2021-4839 ALT-PU-2021-4839: package `docker-cli` update to version 20.10.11-alt2 | CVSS3: 7.5 | 2% Низкий | больше 2 лет назад |
 | openSUSE-SU-2022:0334-1 Security update for containerd, docker | почти 5 лет назад | ||
| SUSE-SU-2022:0334-1 Security update for containerd, docker | почти 5 лет назад | ||
| SUSE-SU-2022:0213-1 Security update for containerd, docker | почти 5 лет назад | ||
| openSUSE-SU-2021:3506-1 Security update for containerd, docker, runc | около 5 лет назад | ||
| openSUSE-SU-2021:1404-1 Security update for containerd, docker, runc | около 5 лет назад | ||
| SUSE-SU-2021:3506-1 Security update for containerd, docker, runc | около 5 лет назад | ||
| SUSE-SU-2021:3336-1 Security update for containerd, docker, runc | около 5 лет назад | ||
| SUSE-SU-2025:03545-1 Security update for docker-stable | около 1 года назад | ||
| SUSE-SU-2025:03540-1 Security update for docker-stable | около 1 года назад |
Уязвимостей на страницу