Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-013 advisory.

    A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw     in the supplementary group access setup. (CVE-2022-36109)

    Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside     the Docker container can access any files within the Docker container. (CVE-2022-37708)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-024 advisory.

    A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw     in the supplementary group access setup. (CVE-2022-36109)

    Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside     the Docker container can access any files within the Docker container. (CVE-2022-37708)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 20.10.23-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-022 advisory.

    A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw     in the supplementary group access setup. (CVE-2022-36109)

    Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside     the Docker container can access any files within the Docker container. (CVE-2022-37708)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2023-022 advisory.

    A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw     in the supplementary group access setup. (CVE-2022-36109)

    Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside     the Docker container can access any files within the Docker container. (CVE-2022-37708)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
195734	RHEL 7 : docker (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
183444	Amazon Linux 2 : docker (ALASECS-2023-013)	Nessus	Amazon Linux Local Security Checks	medium
174971	Amazon Linux 2 : docker (ALASDOCKER-2023-024)	Nessus	Amazon Linux Local Security Checks	medium
173967	Amazon Linux 2 : docker (ALASDOCKER-2023-022)	Nessus	Amazon Linux Local Security Checks	medium
173942	Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2023-022)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2022-37708

No Score

Tenable Plugins

high

medium

medium

medium

medium