CVE-2024-47182
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 27, 2024
Updated: Oct 4, 2024
CWE ID 328
CWE ID 326
Summary
CVE-2024-47182 affects Dozzle, a real-time log viewer for Docker containers, prior to version 8.5.3. The vulnerability lies in the use of SHA-256 as the password hash algorithm, rendering user accounts susceptible to rainbow table attacks. This issue has been mitigated by Dozzle's switch to bcrypt, a more secure password hash function, in version 8.5.3.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.