CVE-2016-8867

High

Published: 28/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Docker Engine version 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive data stored in containers, potentially leading to information leaks or security breaches.

Recommendation

It is recommended to update Docker Engine to the latest version and review and improve capability policies to minimize the risk of unauthorized access.

Other vulnerabilities in Docker Engine 1.12.2

CVE-2015-3630High
Docker Engine before version 1.6.1 uses weak permissions for several system directories, allowing local users to modify the host and obtain sensitive information.

Original NVD description (English source)

Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.