Oval Definition:oval:com.ubuntu.bionic:def:2019135090000000
Revision Date:2019-07-18Version:1
Title:CVE-2019-13509 on Ubuntu 18.04 LTS (bionic) - low.
Description:In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-13509
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND docker.io package in bionic, is related to the CVE in some way and has been fixed (note: '18.09.7-0ubuntu1').
  • BACK