UpHeron
All vulnerabilities

Servers and applications

CVE-2016-8867

Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.

Severity
High 7.5
Published
28 Oct 2016
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:docker:docker
  • Version 1.12.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-8867
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-8867