Critical · published September 19, 2025
🚨 A Docker container with overly-permissive permissions is like a server room door left wide open! Anyone who gains access can grab sensitive files—think secrets, keys, and even session files—making this a critical vulnerability! 🔥 Imagine a hotel where the staff has the keys to every room, and also the master key to the vault where valuables are stored. If any guest can access that staff door, they can unlock any room and steal whatever they want! That's similar to how this vulnerability lets containerized applications access sensitive configuration files if they aren't properly secured. An attacker controlling any compromised container can read and modify sensitive artifacts—this means credentials can be stolen, and they might even execute remote code through Laravel’s APP_KEY. It's an all-you-can-eat buffet of secrets, leading to potential takeover of services like Portainer and a full system compromise—absolutely devastating!
Imagine a hotel where the staff has the keys to every room, and also the master key to the vault where valuables are stored. If any guest can access that staff door, they can unlock any room and steal whatever they want! That's similar to how this vulnerability lets containerized applications access sensitive configuration files if they aren't properly secured. Vasion Print Virtual Appliance and SaaS deployments mount sensitive configurations and secrets under /var/www/efs_storage with excessive filesystem permissions, allowing multiple Docker containers to access these files. This could enable attackers to exploit these containers without needing extensive access rights.
An attacker controlling any compromised container can read and modify sensitive artifacts—this means credentials can be stolen, and they might even execute remote code through Laravel’s APP_KEY. It's an all-you-can-eat buffet of secrets, leading to potential takeover of services like Portainer and a full system compromise—absolutely devastating! Immediate action is needed! Review and tighten filesystem permissions for the mounted configurations and secrets to ensure containers cannot access sensitive data. Investigate upgrading to the latest version, if available, and restrict access policies to contain and monitor Docker containers effectively. You've got this! Strengthening your security posture is totally achievable with these steps! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| vasion/virtual_appliance_application | all versions | — |
| vasion/virtual_appliance_host | all versions | — |