CVE-2018-12608

An issue was discovered in Docker Moby before 17.06.0

published September 10, 2018

CVSS
—
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00920 · 59.9th percentile
Published
2018-09-10T17:00Z
EPSS history
Timeline
  • 10 SEP 17:00Z
    An issue was discovered in Docker Moby before 17.06.0
    cvelistv5