Skip to content

CVE-2014-5280 boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker daemons enabling TCP connections without TLS authentication.

HighCVSS 8.8 EPSS 0.73%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker daemons enabling TCP connections without TLS authentication.

Affected products

ProductAffected versionsFixed in
boot2docker <= 1.2.0 No fix listed

References