Skip to content
OpenAdvisories

Vendor

D2iQ

1 known vulnerabilities.

Products

DC/OS Marathon 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2017-20198 Public exploit

    DC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse

    The Marathon UI in DC/OS < 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem (/) with read/write privil…

    D2iQ DC/OS Marathon