[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNgBLL2BPweGYQ8jjS_0XbpDbsEs70b0vYQpVDMzIsMY":3,"g5a-risk:CVE-2019-13509":263},{"success":4,"data":5,"meta":261},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":93,"weaknesses":94,"weaknessesCount":103,"isActivelyExploited":104,"cisaInfo":15,"otxData":15,"relatedBlogPosts":105,"seoMetadata":106,"configurations":131,"relatedVendorCves":259,"notableEvents":260},"CVE-2019-13509","What is CVE-2019-13509?","In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.","In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add s...","2019-07-18T16:15:11.953","2023-11-07T03:03:51.61",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.03653,[39,39,39,39,39,39,39],"High",[43,47,50,53],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"docker","*","cpe:2.3:a:docker:docker:*:*:*:*:enterprise:*:*:*",{"vendor":44,"product":44,"version":48,"criteria":49,"vulnerable":4},"17.03.2","cpe:2.3:a:docker:docker:17.03.2:1:*:*:enterprise:*:*:*",{"vendor":44,"product":44,"version":51,"criteria":52,"vulnerable":4},"17.06.2","cpe:2.3:a:docker:docker:17.06.2:1:*:*:enterprise:*:*:*",{"vendor":44,"product":44,"version":54,"criteria":55,"vulnerable":4},"18.03.1","cpe:2.3:a:docker:docker:18.03.1:1:*:*:enterprise:*:*:*",4,[58,62,68,74,78,81,85,89],{"url":59,"source":60,"tags":61},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-08\u002Fmsg00084.html","Opensuse",[],{"url":63,"source":64,"tags":65},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F109253","Securityfocus",[66,67],"Third Party Advisory","VDB Entry",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fdocs.docker.com\u002Fengine\u002Frelease-notes\u002F","Docker",[72,73],"Release Notes","Vendor Advisory",{"url":75,"source":76,"tags":77},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FN674WD3OBDPHLWY6EABRHQH5ON6SUJBU\u002F","Fedoraproject",[],{"url":79,"source":76,"tags":80},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FPFFBVE7O73TAVY2BCWXSA2OOSLJVCPXC\u002F",[],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FSep\u002F21","Seclists",[],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190828-0003\u002F","Netapp",[],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4521","Debian",[],8,[95],{"id":96,"name":97,"description":98,"extendedDescription":99,"status":100,"abstraction":101,"structure":102},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",1,false,[],{"title":107,"metaDescription":108,"keywords":109,"canonicalUrl":110,"structuredData":111},"What is CVE-2019-13509? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-13509, a high severity cyber security vulnerability from 2019. In Docker CE and EE before 18.09.8 (as well as Docker EE be...","CVE-2019-13509, CVE-2019-13509 vulnerability, CVE-2019-13509 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, docker security, docker vulnerability","\u002Fwhat-is\u002Fcve-2019-13509",{"@context":112,"@type":113,"headline":107,"description":108,"datePublished":10,"dateModified":11,"author":114,"publisher":118,"about":122,"mainEntityOfPage":126,"articleSection":129,"keywords":130},"https:\u002F\u002Fschema.org","TechArticle",{"@type":115,"name":116,"url":117},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":115,"name":116,"url":117,"logo":119},{"@type":120,"url":121},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":123,"name":6,"description":124,"additionalType":125},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":127,"@id":128},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-13509","Cybersecurity","CVE-2019-13509, CVE-2019-13509 vulnerability, CVE-2019-13509 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[132,252],{"Operator":15,"Negate":15,"Nodes":133},[134],{"Operator":135,"Negate":15,"CPEMatch":136},"OR",[137,141,143,146,149,152,155,158,161,164,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,228,231,234,237,240,243,246,249],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":139,"VersionEndExcluding":140,"VersionEndIncluding":15},"4D022DE6-8533-4360-8F03-B210E63B31AB","18.09.0","18.09.8",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3A35124F-EC46-4CFC-A2A2-893AC0063AF4",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.03.2:2:*:*:enterprise:*:*:*","2C1A46D9-A718-4944-8A51-AA576665A3AD",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.03.2:3:*:*:enterprise:*:*:*","343474A5-E102-4DC1-B11E-F7EB93B8BD34",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":151,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.03.2:4:*:*:enterprise:*:*:*","DF245918-BDC1-4DF8-AEDA-752B4530F634",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":154,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.03.2:5:*:*:enterprise:*:*:*","97E72881-8988-4931-AA78-1E998D03A37B",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":157,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.03.2:6:*:*:enterprise:*:*:*","5ADC31D5-B913-428A-9F7A-5E85349FC5CC",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.03.2:7:*:*:enterprise:*:*:*","C48F0193-894D-4B64-8301-884EBB1DDE8A",{"Vulnerable":4,"Criteria":162,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.03.2:8:*:*:enterprise:*:*:*","4D2262C9-231A-4978-88EF-B59267B5F5CB",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E03D470E-5C28-4935-8ECA-62EED8629889",{"Vulnerable":4,"Criteria":167,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:10:*:*:enterprise:*:*:*","032171DB-4D2A-4691-95E2-DC5791DE1F9C",{"Vulnerable":4,"Criteria":170,"MatchCriteriaID":171,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:11:*:*:enterprise:*:*:*","92852E25-5EE1-477F-BAB9-735DA676F950",{"Vulnerable":4,"Criteria":173,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:12:*:*:enterprise:*:*:*","86BD817A-3BED-46A1-A047-6531D495F05C",{"Vulnerable":4,"Criteria":176,"MatchCriteriaID":177,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:13:*:*:enterprise:*:*:*","AC6A6285-12CC-4591-B722-AA5943915696",{"Vulnerable":4,"Criteria":179,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:15:*:*:enterprise:*:*:*","0B487089-A678-4306-AF75-DBC792A23BCD",{"Vulnerable":4,"Criteria":182,"MatchCriteriaID":183,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:16:*:*:enterprise:*:*:*","45FEBF98-DE0E-4F78-B9A4-7BCB9F4202C5",{"Vulnerable":4,"Criteria":185,"MatchCriteriaID":186,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:17:*:*:enterprise:*:*:*","26D5DFE0-ED60-448B-92C7-4A06611755AE",{"Vulnerable":4,"Criteria":188,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:18:*:*:enterprise:*:*:*","296CC9ED-9AF2-41AE-93CF-4B8C94CE7743",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:19:*:*:enterprise:*:*:*","0178061A-1909-4E39-BF20-3BFD9E8BF22B",{"Vulnerable":4,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:2:*:*:enterprise:*:*:*","444A75C4-8331-46B3-A056-C4944DF3D792",{"Vulnerable":4,"Criteria":197,"MatchCriteriaID":198,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:20:*:*:enterprise:*:*:*","EAF2CFD3-63EB-4DBC-B7A0-BA8858F51F29",{"Vulnerable":4,"Criteria":200,"MatchCriteriaID":201,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:21:*:*:enterprise:*:*:*","4CAEE8A8-337B-406B-9AF0-2538D54F1514",{"Vulnerable":4,"Criteria":203,"MatchCriteriaID":204,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:22:*:*:enterprise:*:*:*","E5CBCA34-6BC1-4069-A12D-78DCA5F06BFD",{"Vulnerable":4,"Criteria":206,"MatchCriteriaID":207,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:3:*:*:enterprise:*:*:*","43BA9F49-85B3-47BD-ABA5-08A234EEDFBB",{"Vulnerable":4,"Criteria":209,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:4:*:*:enterprise:*:*:*","FBE59DD2-4AD2-4FC9-B5B0-2DD2E4DA219E",{"Vulnerable":4,"Criteria":212,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:5:*:*:enterprise:*:*:*","D613D8B1-3608-40B5-ACDA-D0EC0B152F9D",{"Vulnerable":4,"Criteria":215,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:6:*:*:enterprise:*:*:*","1B9A48AB-A032-4911-928F-6D86B86FB847",{"Vulnerable":4,"Criteria":218,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:7:*:*:enterprise:*:*:*","3A86A73A-CAEC-483A-8C42-D1EC88B1A848",{"Vulnerable":4,"Criteria":221,"MatchCriteriaID":222,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:8:*:*:enterprise:*:*:*","8CB75426-B766-48EC-A681-A82747737276",{"Vulnerable":4,"Criteria":224,"MatchCriteriaID":225,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:17.06.2:9:*:*:enterprise:*:*:*","42195FEA-1D74-42B2-9212-DF162E0470AB",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":227,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"53935883-E828-40A7-83F4-7218542A401C",{"Vulnerable":4,"Criteria":229,"MatchCriteriaID":230,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:2:*:*:enterprise:*:*:*","FB720999-4540-487B-9133-32C85026836B",{"Vulnerable":4,"Criteria":232,"MatchCriteriaID":233,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:3:*:*:enterprise:*:*:*","CBEA8855-C9FE-4301-ADAF-993874DDF7F9",{"Vulnerable":4,"Criteria":235,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:4:*:*:enterprise:*:*:*","353070E6-89AD-40C4-9A45-AF993DE52BF0",{"Vulnerable":4,"Criteria":238,"MatchCriteriaID":239,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:5:*:*:enterprise:*:*:*","D4541E93-762A-40DF-B596-A5F359049C0F",{"Vulnerable":4,"Criteria":241,"MatchCriteriaID":242,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:6:*:*:enterprise:*:*:*","987118D7-6803-4E11-A184-34FC82E9AF1B",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:7:*:*:enterprise:*:*:*","97EFE5E1-6623-44A6-8AA7-A7E30955B513",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:8:*:*:enterprise:*:*:*","BF61D0BA-5F95-4E92-8D81-5BE5FA59FF61",{"Vulnerable":4,"Criteria":250,"MatchCriteriaID":251,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:18.03.1:9:*:*:enterprise:*:*:*","DD629561-32BD-4C9D-A38B-063554DCA827",{"Operator":15,"Negate":15,"Nodes":253},[254],{"Operator":135,"Negate":15,"CPEMatch":255},[256],{"Vulnerable":4,"Criteria":257,"MatchCriteriaID":258,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":140,"VersionEndIncluding":15},"cpe:2.3:a:docker:docker:*:*:*:*:community:*:*:*","82A26E20-E07A-4229-907C-2FAF03AD50A3",[],[],{"lastModified":11,"cacheTime":262,"version":32},1792362020570,{"score":264,"band":265,"action":266,"scoredAt":267},48,"Medium","Plan remediation","2026-10-16T06:46:29.76898+00:00"]