CVE-2016-8867

Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2016-10-28

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Docker (Docker)

References

• http://www.securityfocus.com/bid/94228
• http://www.securitytracker.com/id/1037203
• https://www.docker.com/docker-cve-database