UpHeron
All vulnerabilities

Servers and applications

CVE-2023-28842

Encrypted overlay network with a single endpoint is unauthenticated

Severity
Medium 6.8
Published
4 Apr 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
20.10.24, 23.0.3
Also known as
GHSA-6wrf-mxfj-pf5p
Sources
NVD, Project advisories (GitHub)

Description

Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*. Swarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby…

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:mobyproject:moby
  • From 1.12.0 before 20.10.24
  • From 23.0.0 before 23.0.3
Docker EngineServers and applications · github:moby/moby
  • From 1.12 before 23.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-28842
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-28842
  • GitHub Advisory Database https://github.com/advisories/GHSA-6wrf-mxfj-pf5p
  • github.com https://github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p