-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/docker/docker | go | < 18.09.8 | 18.09.8 |
Miggo AIRoot Cause AnalysisThe vulnerability exists in the maskSecretKeys middleware function responsible for redacting sensitive fields in debug logs. The patch shows:
In vulnerable versions, the combination of:
Would cause the middleware.maskSecretKeys function to process secret update requests without redacting the 'Data' field when debug logging was enabled, making it the exact function that would appear in runtime profiles during exploitation.