Publish Advisories

GHSA-8fvr-5rqf-3wwh
GHSA-v4h8-794j-g8mm
GHSA-qrqr-3x5j-2xw9
This commit is contained in:
advisory-database[bot]
2024-07-08 15:54:45 +00:00
parent aff3fb241e
commit e1109345e7
3 changed files with 19 additions and 7 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8fvr-5rqf-3wwh",
"modified": "2021-05-19T22:47:32Z",
"modified": "2024-07-08T15:53:31Z",
"published": "2022-02-15T01:57:18Z",
"aliases": [
"CVE-2015-3630"
@@ -18,7 +18,7 @@
{
"package": {
"ecosystem": "Go",
"name": "github.com/moby/moby"
"name": "github.com/docker/docker"
},
"ranges": [
{
@@ -44,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/moby/moby/commit/545b440a80f676a506e5837678dd4c4f65e78660"
},
{
"type": "PACKAGE",
"url": "https://github.com/moby/moby"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v4h8-794j-g8mm",
"modified": "2021-05-19T22:04:37Z",
"modified": "2024-07-08T15:53:58Z",
"published": "2022-02-15T01:57:18Z",
"aliases": [
"CVE-2015-3631"
@@ -18,7 +18,7 @@
{
"package": {
"ecosystem": "Go",
"name": "github.com/moby/moby"
"name": "github.com/docker/docker"
},
"ranges": [
{
@@ -40,6 +40,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3631"
},
{
"type": "PACKAGE",
"url": "https://github.com/moby/moby"
},
{
"type": "WEB",
"url": "https://github.com/moby/moby/compare/769acfec2928c47a35da5357d854145b1036448d...b6a9dc399be31c531e3753104e10d74760ed75a2"
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qrqr-3x5j-2xw9",
"modified": "2024-01-31T23:28:22Z",
"modified": "2024-07-08T15:54:29Z",
"published": "2024-01-31T23:28:22Z",
"aliases": [
"CVE-2018-12608"
],
"summary": "Docker Moby Authentication Bypass",
"summary": "Docker Authentication Bypass",
"details": "An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.",
"severity": [
{
@@ -18,7 +18,7 @@
{
"package": {
"ecosystem": "Go",
"name": "github.com/moby/moby"
"name": "github.com/docker/docker"
},
"ranges": [
{
@@ -51,6 +51,10 @@
{
"type": "WEB",
"url": "https://github.com/moby/moby/commit/190c6e8cf8b893874a33d83f78307f1bed0bfbcd"
},
{
"type": "PACKAGE",
"url": "https://github.com/moby/moby"
}
],
"database_specific": {