Man-in-the-middle attack vulnerability in docker.io by leveraging a network position between the client and the registry| ID: oval:org.secpod.oval:def:42578 | Date: (C)2017-10-27 (M)2021-12-10 |
| Class: VULNERABILITY | Family: unix |
The host is installed with docker.io on Ubuntu 14.04 and is prone to a man-in-the-middle attack vulnerability. A flaw is present in the application, which fails to properly handle crafted data. Successful exploitation could allow local attackers to conduct downgrade attacks and obtain authentication and image.
