CVE-2018-12608
published 2018-09-10CVE-2018-12608: An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root…
PriorityP337high7.5CVSS 3.0
AVNACLPRNUINSUCNIHAN
EPSS
0.92%
55.8th percentile
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | docker.io | < docker.io 18.03.1+dfsg1-2 (bookworm) | docker.io 18.03.1+dfsg1-2 (bookworm) |
| github.com | docker_docker | >= 0 < 17.06.0-ce | 17.06.0-ce |
| mobyproject | moby | < 17.06.0 | 17.06.0 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
moby: cert signing bypass
vendor_redhat·2018-10-09·CVSS 7.5
CVE-2018-12608 [HIGH] CWE-295 moby: cert signing bypass
moby: cert signing bypass
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
A certificate signing vulnerability was found in Moby. This issue could allow an unauthenticated remote attacker to validate a TLS certificate using Certificate Authorities (CA) from the system instead of only by a specified client CA root, which could allow bypassing of some certificate authorization rules, reducing system integrity.
Mitigation: Some environments may be able to mitiga
Debian
CVE-2018-12608: docker.io - An issue was discovered in Docker Moby before 17.06.0. The Docker engine validat...
vendor_debian·2018·CVSS 7.5
CVE-2018-12608 [HIGH] CVE-2018-12608: docker.io - An issue was discovered in Docker Moby before 17.06.0. The Docker engine validat...
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
Scope: local
bookworm: resolved (fixed in 18.03.1+dfsg1-2)
bullseye: resolved (fixed in 18.03.1+dfsg1-2)
forky: resolved (fixed in 18.03.1+dfsg1-2)
sid: resolved (fixed in 18.03.1+dfsg1-2)
trixie: resolved (fixed in 18.03.1+dfsg1-2)
GHSA
Docker Authentication Bypass
ghsa·2024-01-31
CVE-2018-12608 [HIGH] CWE-288 Docker Authentication Bypass
Docker Authentication Bypass
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
OSV
Docker Authentication Bypass
osv·2024-01-31
CVE-2018-12608 [HIGH] Docker Authentication Bypass
Docker Authentication Bypass
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
OSV
CVE-2018-12608: An issue was discovered in Docker Moby before 17
osv·2018-09-10·CVSS 7.5
CVE-2018-12608 [HIGH] CVE-2018-12608: An issue was discovered in Docker Moby before 17
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-09-10
Published