CVE-2019-13509

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-13509
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-13509.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-13509
Aliases
Downstream
Related
Published
2019-07-18T16:15:11.953Z
Modified
2026-05-18T05:50:37.216945246Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "vendor_product": "docker:docker",
            "cpes": [
                "cpe:2.3:a:docker:docker:*:*:*:*:community:*:*:*",
                "cpe:2.3:a:docker:docker:*:*:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:1:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:2:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:3:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:4:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:5:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:6:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:7:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.03.2:8:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:10:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:11:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:12:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:13:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:15:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:16:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:17:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:18:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:19:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:1:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:20:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:21:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:22:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:2:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:3:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:4:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:5:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:6:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:7:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:8:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:17.06.2:9:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:1:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:2:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:3:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:4:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:5:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:6:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:7:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:8:*:*:enterprise:*:*:*",
                "cpe:2.3:a:docker:docker:18.03.1:9:*:*:enterprise:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "18.09.0"
                },
                {
                    "fixed": "18.09.8"
                },
                {
                    "introduced": "18.09.0"
                },
                {
                    "fixed": "18.09.8"
                },
                {
                    "introduced": "18.09.0"
                },
                {
                    "fixed": "18.09.8"
                },
                {
                    "last_affected": "17.03.2-1"
                },
                {
                    "last_affected": "17.03.2-1"
                },
                {
                    "last_affected": "17.03.2-1"
                },
                {
                    "last_affected": "17.03.2-2"
                },
                {
                    "last_affected": "17.03.2-2"
                },
                {
                    "last_affected": "17.03.2-2"
                },
                {
                    "last_affected": "17.03.2-3"
                },
                {
                    "last_affected": "17.03.2-3"
                },
                {
                    "last_affected": "17.03.2-3"
                },
                {
                    "last_affected": "17.03.2-4"
                },
                {
                    "last_affected": "17.03.2-4"
                },
                {
                    "last_affected": "17.03.2-4"
                },
                {
                    "last_affected": "17.03.2-5"
                },
                {
                    "last_affected": "17.03.2-5"
                },
                {
                    "last_affected": "17.03.2-5"
                },
                {
                    "last_affected": "17.03.2-6"
                },
                {
                    "last_affected": "17.03.2-6"
                },
                {
                    "last_affected": "17.03.2-6"
                },
                {
                    "last_affected": "17.03.2-7"
                },
                {
                    "last_affected": "17.03.2-7"
                },
                {
                    "last_affected": "17.03.2-7"
                },
                {
                    "last_affected": "17.03.2-8"
                },
                {
                    "last_affected": "17.03.2-8"
                },
                {
                    "last_affected": "17.03.2-8"
                },
                {
                    "last_affected": "17.06.2-1"
                },
                {
                    "last_affected": "17.06.2-1"
                },
                {
                    "last_affected": "17.06.2-1"
                },
                {
                    "last_affected": "17.06.2-10"
                },
                {
                    "last_affected": "17.06.2-10"
                },
                {
                    "last_affected": "17.06.2-10"
                },
                {
                    "last_affected": "17.06.2-11"
                },
                {
                    "last_affected": "17.06.2-11"
                },
                {
                    "last_affected": "17.06.2-11"
                },
                {
                    "last_affected": "17.06.2-12"
                },
                {
                    "last_affected": "17.06.2-12"
                },
                {
                    "last_affected": "17.06.2-12"
                },
                {
                    "last_affected": "17.06.2-13"
                },
                {
                    "last_affected": "17.06.2-13"
                },
                {
                    "last_affected": "17.06.2-13"
                },
                {
                    "last_affected": "17.06.2-15"
                },
                {
                    "last_affected": "17.06.2-15"
                },
                {
                    "last_affected": "17.06.2-15"
                },
                {
                    "last_affected": "17.06.2-16"
                },
                {
                    "last_affected": "17.06.2-16"
                },
                {
                    "last_affected": "17.06.2-16"
                },
                {
                    "last_affected": "17.06.2-17"
                },
                {
                    "last_affected": "17.06.2-17"
                },
                {
                    "last_affected": "17.06.2-17"
                },
                {
                    "last_affected": "17.06.2-18"
                },
                {
                    "last_affected": "17.06.2-18"
                },
                {
                    "last_affected": "17.06.2-18"
                },
                {
                    "last_affected": "17.06.2-19"
                },
                {
                    "last_affected": "17.06.2-19"
                },
                {
                    "last_affected": "17.06.2-19"
                },
                {
                    "last_affected": "17.06.2-2"
                },
                {
                    "last_affected": "17.06.2-2"
                },
                {
                    "last_affected": "17.06.2-2"
                },
                {
                    "last_affected": "17.06.2-20"
                },
                {
                    "last_affected": "17.06.2-20"
                },
                {
                    "last_affected": "17.06.2-20"
                },
                {
                    "last_affected": "17.06.2-21"
                },
                {
                    "last_affected": "17.06.2-21"
                },
                {
                    "last_affected": "17.06.2-21"
                },
                {
                    "last_affected": "17.06.2-22"
                },
                {
                    "last_affected": "17.06.2-22"
                },
                {
                    "last_affected": "17.06.2-22"
                },
                {
                    "last_affected": "17.06.2-3"
                },
                {
                    "last_affected": "17.06.2-3"
                },
                {
                    "last_affected": "17.06.2-3"
                },
                {
                    "last_affected": "17.06.2-4"
                },
                {
                    "last_affected": "17.06.2-4"
                },
                {
                    "last_affected": "17.06.2-4"
                },
                {
                    "last_affected": "17.06.2-5"
                },
                {
                    "last_affected": "17.06.2-5"
                },
                {
                    "last_affected": "17.06.2-5"
                },
                {
                    "last_affected": "17.06.2-6"
                },
                {
                    "last_affected": "17.06.2-6"
                },
                {
                    "last_affected": "17.06.2-6"
                },
                {
                    "last_affected": "17.06.2-7"
                },
                {
                    "last_affected": "17.06.2-7"
                },
                {
                    "last_affected": "17.06.2-7"
                },
                {
                    "last_affected": "17.06.2-8"
                },
                {
                    "last_affected": "17.06.2-8"
                },
                {
                    "last_affected": "17.06.2-8"
                },
                {
                    "last_affected": "17.06.2-9"
                },
                {
                    "last_affected": "17.06.2-9"
                },
                {
                    "last_affected": "17.06.2-9"
                },
                {
                    "last_affected": "18.03.1-1"
                },
                {
                    "last_affected": "18.03.1-1"
                },
                {
                    "last_affected": "18.03.1-1"
                },
                {
                    "last_affected": "18.03.1-2"
                },
                {
                    "last_affected": "18.03.1-2"
                },
                {
                    "last_affected": "18.03.1-2"
                },
                {
                    "last_affected": "18.03.1-3"
                },
                {
                    "last_affected": "18.03.1-3"
                },
                {
                    "last_affected": "18.03.1-3"
                },
                {
                    "last_affected": "18.03.1-4"
                },
                {
                    "last_affected": "18.03.1-4"
                },
                {
                    "last_affected": "18.03.1-4"
                },
                {
                    "last_affected": "18.03.1-5"
                },
                {
                    "last_affected": "18.03.1-5"
                },
                {
                    "last_affected": "18.03.1-5"
                },
                {
                    "last_affected": "18.03.1-6"
                },
                {
                    "last_affected": "18.03.1-6"
                },
                {
                    "last_affected": "18.03.1-6"
                },
                {
                    "last_affected": "18.03.1-7"
                },
                {
                    "last_affected": "18.03.1-7"
                },
                {
                    "last_affected": "18.03.1-7"
                },
                {
                    "last_affected": "18.03.1-8"
                },
                {
                    "last_affected": "18.03.1-8"
                },
                {
                    "last_affected": "18.03.1-8"
                },
                {
                    "last_affected": "18.03.1-9"
                },
                {
                    "last_affected": "18.03.1-9"
                },
                {
                    "last_affected": "18.03.1-9"
                },
                {
                    "fixed": "18.09.8"
                },
                {
                    "fixed": "18.09.8"
                },
                {
                    "fixed": "18.09.8"
                }
            ]
        },
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "17.06.2-ee-23"
                },
                {
                    "introduced": "18.x"
                },
                {
                    "fixed": "18.03.1-ee-10"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/moby/moby

Affected ranges

Type
GIT
Repo
https://github.com/moby/moby
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
456712c5b8d9d92c047f6a7d7cff270527ecac28
Database specific 
{
    "source": "DESCRIPTION",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "18.09.8"
        }
    ]
}

Affected versions

0.*
0.0.3
docs-v1.*
docs-v1.12.0-rc4-2016-07-15
upstream/0.*
upstream/0.1.2
upstream/0.1.3
v0.*
v0.1.0
v0.1.1
v0.1.2
v0.1.3
v0.1.4
v0.1.5
v0.1.6
v0.1.7
v0.1.8
v0.2.0
v0.2.1
v0.2.2
v0.3.0
v0.3.1
v0.3.2
v0.4.1
v0.4.2
v0.4.4
v0.4.5
v0.4.7
v0.5.0
v0.6.5
v0.7.0
v0.7.1
v0.7.2
v18.*
v18.06.0-ce-rc1
v18.09.0
v18.09.0-beta3
v18.09.0-beta5
v18.09.0-ce-beta1
v18.09.0-ce-tp0
v18.09.0-ce-tp3
v18.09.0-ce-tp4
v18.09.0-ce-tp5
v18.09.0-ce-tp6
v18.09.0-rc1
v18.09.1
v18.09.1-beta1
v18.09.1-beta2
v18.09.1-rc1
v18.09.2
v18.09.3
v18.09.3-rc1
v18.09.4
v18.09.4-rc1
v18.09.5
v18.09.5-rc1
v18.09.6
v18.09.6-rc1
v18.09.7
v18.09.7-rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-13509.json"