CyberRota Analysis
AI-GeneratedThe vulnerability in Docker's docker-socket-proxy allows unauthorized access to sensitive container data when the CONTAINERS environment variable is set, enabling attackers to exploit specific API endpoints to read arbitrary files and download complete container filesystems. This poses a significant risk to environments relying on Docker for container management, particularly those handling sensitive data. Organizations utilizing Docker should prioritize remediation to mitigate potential data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.