VULNERABILITY INTELLIGENCE
CVE-2015-3630
CVSS score7.2 HIGH
EPSS probability0.55%
CISA KEVNot currently listed
Published2015-05-18
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.