Not rated
CVE-2018-11757 In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag…
Description
In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may allow an attacker to replace the user function inside the container if the user code is vulnerable to code exploitation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Skeleton Runtime for Apache OpenWhisk | Versions not published |
References
- 104913 www.securityfocus.com
- [openwhisk-dev] 20180720 [CVE] CVE-2018-11757 Docker Skeleton Runtime for Apache OpenWhisk lists.apache.org
- github.com github.com
Timeline
- Published
- Last modified