Skip to content

Latest commit

 

History

History
25 lines (23 loc) · 894 Bytes

0006.md

File metadata and controls

25 lines (23 loc) · 894 Bytes
Raw

MCR: The Swarm VXLAN port may be exposed to attack due to ambiguous documentation

Release Date

2023-04-04

Overview

System administrators may have been misled by ambiguities in the Swarm Mode documentation, which enumerates a list of ports used by the feature without appropriate context and cautionary labeling.

Consult the upstream advisory for details and instructions.

Affected Products

Mirantis Container Runtime (MCR)

Vulnerability Information

Identifier

GHSA-vwm3-crmr-xfxw

CVSSv3.1

N/A

CWEs

N/A

Acknowledgements

Found by the MCR team, with assistance from the Moby community

Disclosure Timeline

  • 2023-04-04: Security advisory disclosed
  • 2023-03-09: Upstream partners alerted
  • 2023-03-08: Security issue identified by MCR team