vulnerability
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
HighCVSS 9.4
Summary
A two-year-old flaw in Docker Hub allowed one user to push, pull, or delete images as another user through account conversions. Docker quickly fixed the issue, and investigation found no evidence of exploitation. Docker advises users to review their tokens, revoke unused ones, and utilize organization access tokens for automation.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data