CVE-2016-8867

Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory securityfocus.com
advisory docker.com
web securitytracker.com