Database/Container, Kubernetes & orchestration
Docker / moby: Docker Engine in debug mode writes secrets into the debug log
CVSS 7.5CVE-2019-13509Container, Kubernetes & orchestrationcurated
Impact
Docker Engine in debug mode writes secrets into the debug log
Who can reach it
Anyone with node or log-pipeline read access
What to do
Turn off daemon debug mode; rotate leaked secrets; scrub log store
References
Related entries
- Docker / moby: Swarm overlay-network encryption silently not appliedCVE-2023-28840 · Docker / mobyHigh
- Docker / moby: Race condition during `docker cp` mount setup allows escape/host accessCVE-2026-42306 · Docker / mobyHigh
- Docker / moby: Classic builder cache poisoning for images built FROM scratchCVE-2024-24557 · Docker / mobyMedium
- Docker / moby: With --userns-remap, remapped root can escalate to real host rootCVE-2021-21284 · Docker / mobyMedium
- Docker / moby: Encrypted overlay network traffic can be unencrypted due to missing rulesCVE-2023-28841 · Docker / mobyMedium
- Docker / moby: Unauthenticated injection of traffic into an encrypted overlay networkCVE-2023-28842 · Docker / mobyMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.