Docker Symlink-Race Vulnerability Could Allow Unauthorized Data Access

A pair of SUSE security researchers have unearthed a vulnerability within all versions of the Docker container engine that provides an attacker a way to get to the host or other containers managed by the host. A patch has been submitted upstream, and is currently under review, according to security researcher Aleksa Sarai.

Read full article on The New Stack