CVE-2016-6349
oci-register-machine: information exposure for docker containers
Loading…
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · July 27, 2016
Updated · May 13, 2026
Description
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 4CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 · 1.9AV:L/AC:M/Au:N/C:P/I:N/A:N
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor