Threats tagged 'ghsa-3m4h-jf7h-5gx2'

Jpom versions through 2.11.12 have a cross-workspace authorization bypass vulnerability. Authenticated users with Docker permissions in any workspace can manipulate Docker hosts in other workspaces by using foreign Docker asset IDs. This allows control over containers, images, volumes, and networks, including the creation of privileged containers with host bind mounts.