Vendors / Boot2docker Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Boot2docker records in CISA KEV No Boot2docker vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP connections by default, which makes it easier for remote attackers to gain privileges or execute arbitrary code from childre…
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0277 · Published 2018-02-06 · No fix listed CWE-284
Priority LOW 39
boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker daemons enabling TCP connections without TLS authentication.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00729 · Published 2018-02-06 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 0 0 0
