Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-013 advisory.

  - Moby is an open-source project created by Docker to enable software containerization. A bug was found in     Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access     to a container and manipulates their supplementary group access, they may be able to use supplementary     group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive     information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker     Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For     users unable to upgrade, this problem can be worked around by not using the `USER $USERNAME` Dockerfile     instruction. Instead by calling `ENTRYPOINT [su, -, user]` the supplementary groups will be set up     properly. (CVE-2022-36109)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-024 advisory.

  - Moby is an open-source project created by Docker to enable software containerization. A bug was found in     Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access     to a container and manipulates their supplementary group access, they may be able to use supplementary     group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive     information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker     Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For     users unable to upgrade, this problem can be worked around by not using the `USER $USERNAME` Dockerfile     instruction. Instead by calling `ENTRYPOINT [su, -, user]` the supplementary groups will be set up     properly. (CVE-2022-36109)

  - Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside     the Docker container can access any files within the Docker container. (CVE-2022-37708)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-022 advisory.

  - Moby is an open-source project created by Docker to enable software containerization. A bug was found in     Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access     to a container and manipulates their supplementary group access, they may be able to use supplementary     group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive     information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker     Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For     users unable to upgrade, this problem can be worked around by not using the `USER $USERNAME` Dockerfile     instruction. Instead by calling `ENTRYPOINT [su, -, user]` the supplementary groups will be set up     properly. (CVE-2022-36109)

  - Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside     the Docker container can access any files within the Docker container. (CVE-2022-37708)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2023-022 advisory.

  - Moby is an open-source project created by Docker to enable software containerization. A bug was found in     Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access     to a container and manipulates their supplementary group access, they may be able to use supplementary     group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive     information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker     Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For     users unable to upgrade, this problem can be worked around by not using the `USER $USERNAME` Dockerfile     instruction. Instead by calling `ENTRYPOINT [su, -, user]` the supplementary groups will be set up     properly. (CVE-2022-36109)

  - Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside     the Docker container can access any files within the Docker container. (CVE-2022-37708)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
195734	RHEL 7 : docker (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
183444	Amazon Linux 2 : docker (ALASECS-2023-013)	Nessus	Amazon Linux Local Security Checks	medium
174971	Amazon Linux 2 : docker (ALASDOCKER-2023-024)	Nessus	Amazon Linux Local Security Checks	medium
173967	Amazon Linux 2 : docker (ALASDOCKER-2023-022)	Nessus	Amazon Linux Local Security Checks	medium
173942	Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2023-022)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2022-37708

No Score

Tenable Plugins

high

medium

medium

medium

medium