CVE-2025-4095CWE-862

Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

Medium · published April 29, 2025

CVSS v4.0
4.3
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.

The record
Technical detail
CVSS v4.0
4.3 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-04-29T17:16Z
EPSS history
Timeline
  • 29 APR 17:16Z
    Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
    cvelistv5