CVE-2018-12608 Docker Authentication Bypass

What is CVE-2018-12608?

CVE-2018-12608 is a high-severity authentication bypass vulnerability in n/a, published on 10 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.

Weakness: CWE-295

Which versions are affected by CVE-2018-12608?

2 open source packages ship an affected version, including github.com/docker/docker. It affects 1 product.

Products include Mobyproject Moby.

How do I fix CVE-2018-12608?

Upgrade github.com/docker/docker to 17.06.0-ce or later.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2018-12608 being exploited?

There is no known exploitation of CVE-2018-12608 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2024-36623 Moby Race Condition vulnerability High 8.1
• CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated High 7.5
• CVE-2024-24557 Moby classic builder cache poisoning Medium 6.9
• CVE-2023-28841 moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted Medium 6.8
• CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2018-12608, GHSA-qrqr-3x5j-2xw9, UBUNTU-CVE-2018-12608.