In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-07-18T15:34:59
Updated: 2024-08-04T23:57:39.278Z
Reserved: 2019-07-11T00:00:00
Link: CVE-2019-13509
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-07-18T16:15:11.953
Modified: 2024-11-21T04:25:02.213
Link: CVE-2019-13509
Redhat