Approved changes feed: RSS · Atom

cpe:2.3:a:docker:docker:17.03.2:7:*:*:enterprise:*:*:*

part: a version: 17.03.2 update: 7

VendorDocker (fb312c2d-be4d-5919-b619-61409dcafa2c)
ProductDocker (c8c9d969-271a-5fc1-a74d-e1a37f1d19cf)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/docker purl2cpe 2026-06-01 10:13:11.016160
pkg:deb/ubuntu/docker purl2cpe 2026-06-01 10:13:11.016161
pkg:github/docker/docker-install purl2cpe 2026-06-01 10:13:11.016162

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13509 vulnerable 2026-06-03 14:39:42.643352 Details available
In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
Published: 2019-07-18T15:34:59.000Z
Updated: 2024-08-04T23:57:39.278Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.