PT-2026-108132 · Docker · Docker Sandboxes
CVSS v4.0
5.9
Medium
| Vector | AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Docker Sandboxes (affected versions not specified)
Description
The egress proxy in Docker Sandboxes may forward client-supplied credentials along with credentials injected by the host. This occurs because the proxy only removes alternate credentials if their values match specific sentinel values. Consequently, untrusted code within an authorized sandbox can provide an unrecognized credential in a supported authentication header. For affected upstream services, this could lead to the request being authenticated to an account controlled by an attacker, potentially exposing data contained within the request.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Docker Sandboxes