cisco-sa-20161221-cco: Cisco CloudCenter Orchestrator Docker Engine Privilege Escalation Vulnerability
Published Dec 21, 2016
·Updated
Credit
This vulnerability was found during the resolution(support cases)
Affected Software
2 affected components
Cisco CloudCenter Orchestrator
Cisco Docker Engine
Remediation
Event History
Dec 21, 2016
Advisory Published
04:00 PM
Data Sourced
04:00 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of cisco-sa-20161221-cco?
The severity of cisco-sa-20161221-cco is classified as low.
2
How do I fix cisco-sa-20161221-cco?
To fix cisco-sa-20161221-cco, restrict the Docker Engine port to bind to localhost by obtaining sudo privileges and modifying the configuration.
3
What is the impact of cisco-sa-20161221-cco?
The impact of cisco-sa-20161221-cco is potential privilege escalation within the Cisco CloudCenter Orchestrator and Docker Engine.
4
Which software is affected by cisco-sa-20161221-cco?
cisco-sa-20161221-cco affects Cisco CloudCenter Orchestrator and Cisco Docker Engine.
5
What type of vulnerability is cisco-sa-20161221-cco?
cisco-sa-20161221-cco is a privilege escalation vulnerability.