Description
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
References
- [oss-security] 20160726 Re: cve request: systemd-machined: information exposure for docker containers mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1360634
- [oss-security] 20161013 Re: cve request: systemd-machined: information exposure for docker containers mailing-list
- https://github.com/projectatomic/oci-register-machine/pull/22
- 92143 vdb-entry