Authenticated Docker Cache Path Traversal

Executive Summary

This vulnerability allows an authenticated user to write data outside the intended Docker cache path when specific remote-repository conditions are met. It does not require high privileges but could lead to unauthorized data placement.

Useful 0 Not Useful 0

Detection Guidance

Detection requires checking Docker cache path configurations and remote repository settings in JFrog Artifactory. Review Artifactory logs for unauthorized write attempts outside cache paths and verify Docker repository configurations for exposed paths. Use commands like 'docker inspect' to check container volumes and 'find' to search for unexpected writes in cache directories.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to store malicious or unintended files outside the Docker cache, potentially causing system instability, data corruption, or unauthorized access to sensitive information.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows authenticated users to write data outside intended paths under specific conditions, which could lead to unauthorized data access or modification. This may impact compliance with GDPR (data integrity and access controls) and HIPAA (data protection and integrity requirements).

Useful 0 Not Useful 0

Mitigation Strategies

Update Docker to the latest version to address the authenticated user write vulnerability outside the intended cache path.

Useful 0 Not Useful 0