Description
Dockhand before 1.0.55 contains an improper authorization vulnerability that lets users holding only containers:view download arbitrary container files instead of requiring containers:exec. Authenticated Enterprise RBAC users can request any path from the files/download endpoint, which reads through Docker's archive API, to retrieve secrets, keys, and mounted credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Finsys | dockhand | 0 <1.0.55 | — |