high8.8
CVE-2014-5280
boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker daemons enabling TCP connections without…
Impact
boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker daemons enabling TCP connections without TLS authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boot2docker | Boot2docker | through 1.2.0 |