漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
DC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse
漏洞信息
The Marathon UI in DC/OS < 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem (/) with read/write privileges. When using a malicious Docker image, the attacker can write to /etc/cron.d/ on the host, achieving arbitrary code execution with root privileges. This impacts any system where the Docker daemon honors Marathon container configurations without policy enforcement.
漏洞信息
N/A
漏洞
关键资源的不正确权限授予
漏洞
D2iQ DC/OS Marathon 安全漏洞
漏洞信息
D2iQ DC/OS Marathon是美国D2iQ公司的一款原生任务调度器。 D2iQ DC/OS Marathon1.9.0之前版本存在安全漏洞，该漏洞源于对卷挂载配置的限制不足，可能导致任意Docker容器部署。
漏洞信息
N/A
漏洞
N/A