Pallets Werkzeug up to 0.15.2 Docker PIN unknown vulnerability

A vulnerability was found in Pallets Werkzeug up to 0.15.2. It has been classified as problematic. This affects an unknown functionality of the component Docker Handler. The impact remains unknown.

The weakness was shared 08/09/2019. This vulnerability is uniquely identified as CVE-2019-14806 since 08/09/2019. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/09/2019).

Upgrading to version 0.15.3 eliminates this vulnerability.

Vendor

• Pallets

Name

• Werkzeug

• 🔒
• 🔒
• 🔒

• 🔒
• 🔒
• 🔒

Class: Unknown / PIN
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Upgrade
Status: 🔍

0-Day Time: 🔒

Upgrade: Werkzeug 0.15.3

08/09/2019 Advisory disclosed
08/09/2019 +0 days VulDB entry created
08/09/2019 +0 days CVE assigned
08/09/2019 +0 days VulDB last update
CVE: CVE-2019-14806 (🔒)Created: 08/09/2019 09:25 PM
Complete: 🔍

Comments

Comments are closed.