CyberRota Analysis
AI-GeneratedDocker versions up to 1.6.0 are vulnerable to a critical remote code execution flaw due to the exposed H2 database web console, which can be accessed using default credentials. This allows unauthenticated attackers to execute arbitrary OS commands, potentially leading to root-level access on systems running the stock Docker image. Organizations utilizing affected Docker versions should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint, authenticate with default credentials, and leverage the H2 CREATE ALIAS Runtime.exec() technique to execute arbitrary commands, resulting in root-level code execution when running the stock Docker image.