In Docker CE and EE prior to 18.09.8 (as well as Docker EE prior to 17.06.2-ee-23 and 18.x prior to 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
docker docker 17.03.2 |
||
docker docker 17.06.2 |
||
docker docker 18.03.1 |
||
docker docker |
Vulmon